4.8
Moyenne
CVE-2026-3468 A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to…
Description
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Email Security | Versions non publiées |
Autres CVE de Email Security
Les 11 CVE de Email Security →
CVE-2026-66150
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
7.8
Élevée
CVE-2026-66149
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows…
7.8
Élevée
CVE-2026-3470
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to…
3.8
Faible
CVE-2026-3469
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security…
2.7
Faible