| CVE-2026-18634 |
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1…
|
8.4
Élevée
|
11 août 2026 |
| CVE-2026-66154 |
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1…
|
8.3
Élevée
|
11 août 2026 |
| CVE-2026-66148 |
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build…
|
6.3
Moyenne
|
11 août 2026 |
| CVE-2026-66147 |
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier…
|
9.4
Critique
|
11 août 2026 |
| CVE-2026-66146 |
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier…
|
6.1
Moyenne
|
11 août 2026 |
| CVE-2026-66145 |
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier…
|
9.1
Critique
|
11 août 2026 |
| CVE-2024-29011 |
Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability
|
7.5
Élevée
|
1 mai 2024 |
| CVE-2024-29010 |
The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially…
|
7.1
Élevée
|
1 mai 2024 |
| CVE-2023-34137 |
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34136 |
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34135 |
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34134 |
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34133 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS…
|
7.5
Élevée
|
13 juil. 2023 |
| CVE-2023-34132 |
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34131 |
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34130 |
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34129 |
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34128 |
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34127 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall…
|
8.8
Élevée
|
13 juil. 2023 |
| CVE-2023-34126 |
Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34125 |
Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the…
|
Non notée
|
13 juil. 2023 |
| CVE-2023-34124 |
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing…
|
9.8
Critique
|
13 juil. 2023 |
| CVE-2023-34123 |
Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics
|
Non notée
|
12 juil. 2023 |
| CVE-2019-7478 |
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module
|
Non notée
|
30 déc. 2019 |