Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
SonicWall

SonicWall Analytics vulnerabilities

15 published CVEs name SonicWall Analytics among the affected products.

Published CVEs
15
Last 12 months
0
Critical
6
Known exploited
0

Critical 6High 5Medium 4Low 0Not scored 0

Newest CVEs

  • CVE-2023-34137

    SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass…

    SonicWall · GMS

    Critical9.8
  • CVE-2023-34136

    Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This…

    SonicWall · GMS

    Critical9.8
  • CVE-2023-34135

    Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via…

    SonicWall · GMS

    Medium6.5
  • CVE-2023-34134

    Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator…

    SonicWall · GMS

    Medium6.5
  • CVE-2023-34133

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated…

    SonicWall · GMS

    High7.5
  • CVE-2023-34132

    Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS:…

    SonicWall · GMS

    Critical9.8
  • CVE-2023-34131

    Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker to access…

    SonicWall · GMS

    Medium5.3
  • CVE-2023-34130

    SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and…

    SonicWall · GMS

    Critical9.8
  • CVE-2023-34129

    Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote…

    SonicWall · GMS

    High8.8
  • CVE-2023-34128

    Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions;…

    SonicWall · GMS

    Critical9.8