SonicWall

Records284All Threatist records

Exploited (KEV)24In CISA KEV

CVSS critical65CVSS 9.0–10.0

CVSS high124CVSS 7.0–8.9

Exploited now

SonicWall records in CISA KEV

TI-2026-86082 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability CRITICAL 90KEV 2026-11-06 TI-2026-57684 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 100KEV 2026-09-02 TI-2026-57685 SonicWall SMA1000 Appliances OS Command Injection Vulnerability CRITICAL 93KEV 2026-09-02 TI-2026-12965 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CRITICAL 100KEV 2026-07-14 TI-2026-12966 SonicWall SMA1000 Appliances Code Injection Vulnerability CRITICAL 91KEV 2026-07-14 TI-2025-27082 SonicWall SMA1000 Missing Authorization Vulnerability CRITICAL 88KEV 2025-12-17

Components

Products in the NVD configurations · select one to filter the records

Sonicos 68 records CRITICAL Sma 210 Firmware 35 records CRITICAL Sma 410 Firmware 35 records CRITICAL Global Management System 32 records CRITICAL Sma 500v Firmware 32 records CRITICAL Sma 200 Firmware 27 records CRITICAL Sma 400 Firmware 27 records CRITICAL Sonicosv 19 records CRITICAL

Records

10 records in Analyzer · all components

TI-2013-01190 CVE-2013-1359 · GHSA-6qrj-83cw-546c

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global…

CRITICAL 85

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.89402 Published 2020-02-11 No fix listed CWE-287

TI-2013-01191 CVE-2013-1360 · GHSA-2g63-6gwh-xmr7

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System…

MEDIUM 62

An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23211 Published 2020-02-11 No fix listed CWE-287

TI-2014-06917 CVE-2014-8420 · GHSA-x3g5-w3fq-h658

The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2…

MEDIUM 60

The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary co…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.23987 Published 2014-11-25 No fix listed CWE-20

TI-2016-02155 CVE-2016-2397 · GHSA-v2j2-vm4g-crf7

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0…

MEDIUM 51

The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06437 Published 2016-02-17 No fix listed CWE-77

TI-2016-02154 CVE-2016-2396 · GHSA-4mhr-7j52-2gq7

The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000…

MEDIUM 50

The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to conf…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04746 Published 2016-02-17 No fix listed CWE-77

TI-2015-03373 CVE-2015-3990 · GHSA-x33x-2wm8-mhw9

The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000…

MEDIUM 44

The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02671 Published 2015-05-20 No fix listed CWE-19

TI-2018-04102 CVE-2018-5691 · GHSA-58rp-652w-3cjw

SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values…

LOW 26

SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00708 Published 2018-01-14 No fix listed CWE-79

TI-2014-00318 CVE-2014-0332 · GHSA-jpgq-q3fg-4224

Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1…

LOW 25

Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web sc…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02761 Published 2014-02-14 No fix listed CWE-79

TI-2013-05776 CVE-2013-7025 · GHSA-qgv6-wjcr-7pxr

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.04337 Published 2013-12-09 No fix listed CWE-79

TI-2014-04126 CVE-2014-5024 · GHSA-6h3j-2h7w-h5c9

Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS…

LOW 23

Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01627 Published 2014-07-24 No fix listed CWE-79

Open these records in search →