SonicWall Analytics
15 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-34137 | 2.5.0.4-R7 and earlier versions | SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authenticatio | CRITICAL 9.8 | 1.0 % | ||
| CVE-2023-34136 | 2.5.0.4-R7 and earlier versions | Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the | CRITICAL 9.8 | 0.8 % | ||
| CVE-2023-34135 | 2.5.0.4-R7 and earlier versions | Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlyi | MEDIUM 6.5 | 1.6 % | ||
| CVE-2023-34134 | 2.5.0.4-R7 and earlier versions | Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to rea | MEDIUM 6.5 | 1.1 % | ||
| CVE-2023-34133 | 2.5.0.4-R7 and earlier versions | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an | HIGH 7.5 | 73 % | ||
| CVE-2023-34132 | 2.5.0.4-R7 and earlier versions | Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This | CRITICAL 9.8 | 7.7 % | ||
| CVE-2023-34131 | 2.5.0.4-R7 and earlier versions | Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker | MEDIUM 5.3 | 0.8 % | ||
| CVE-2023-34130 | 2.5.0.4-R7 and earlier versions | SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects | CRITICAL 9.8 | 0.3 % | ||
| CVE-2023-34129 | 2.5.0.4-R7 and earlier versions | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authen | HIGH 8.8 | 41 % | ||
| CVE-2023-34128 | 2.5.0.4-R7 and earlier versions | Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlie | CRITICAL 9.8 | 0.7 % | ||
| CVE-2023-34127 | 2.5.0.4-R7 and earlier versions | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analyti | HIGH 8.8 | 86 % | ||
| CVE-2023-34126 | 2.5.0.4-R7 and earlier versions | Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privile | HIGH 8.8 | 0.8 % | ||
| CVE-2023-34125 | 2.5.0.4-R7 and earlier versions | Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem wi | MEDIUM 6.5 | 24 % | ||
| CVE-2023-34124 | 2.5.0.4-R7 and earlier versions | The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue | CRITICAL 9.8 | 50 % | ||
| CVE-2023-34123 | 2.5.0.4-R7 and earlier versions | Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versi | HIGH 7.5 | 0.8 % |