Advisories · Technology

Sangfor Net-Gen Application Firewall.

Every CVE that names Sangfor Net-Gen Application Firewall among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-30806 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Sangfor Next-Gen Application Firewall PHPSESSID Command Injection
- Sangfor Net-Gen Application Firewall
- Command injection
Not analysed yet 10 Oct 2023
CVE-2023-30805 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Sangfor Next-Gen Application Firewall Login Un Param Command Injection
- Sangfor Net-Gen Application Firewall
- Command injection
Not analysed yet 10 Oct 2023
CVE-2023-30803 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Sangfor Next-Gen Application Firewall Authentication Bypass
- Sangfor Net-Gen Application Firewall
- Authentication bypass
Not analysed yet 10 Oct 2023
CVE-2023-30802 CVE record

CVSS 5.3 Medium

Sangfor Next-Gen Application Firewall Source Code Disclosure
- Sangfor Net-Gen Application Firewall
- CWE-540
Not analysed yet 10 Oct 2023