Advisories · Technology

SonicWall Analytics.

Every CVE that names SonicWall Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-34137 CVE record

SonicWall GMS: SonicWall GMS and Analytics CAS Web Services application use static values for…
- SonicWall GMS
- SonicWall Analytics
- CWE-305
Not analysed yet 13 Jul 2023
CVE-2023-34136 CVE record

Unrestricted file upload in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Unrestricted file upload
Not analysed yet 13 Jul 2023
CVE-2023-34135 CVE record

Path traversal in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Path traversal
Not analysed yet 13 Jul 2023
CVE-2023-34134 CVE record

Information disclosure in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Information disclosure
Not analysed yet 13 Jul 2023
CVE-2023-34133 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

SQL injection in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- SQL injection
Not analysed yet 13 Jul 2023
CVE-2023-34132 CVE record

SonicWall GMS: Use of password hash instead of password for authentication vulnerability in SonicWall…
- SonicWall GMS
- SonicWall Analytics
- CWE-836
Not analysed yet 13 Jul 2023
CVE-2023-34131 CVE record

Information disclosure in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Information disclosure
Not analysed yet 13 Jul 2023
CVE-2023-34130 CVE record

Broken or risky cryptographic algorithm in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Weak cryptography or TLS
Not analysed yet 13 Jul 2023
CVE-2023-34129 CVE record

Path traversal in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Path traversal
Not analysed yet 13 Jul 2023
CVE-2023-34128 CVE record

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.
- SonicWall GMS
- SonicWall Analytics
- CWE-260
Not analysed yet 13 Jul 2023
CVE-2023-34127 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

OS command injection in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Command injection
Not analysed yet 13 Jul 2023
CVE-2023-34126 CVE record

Unrestricted file upload in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Unrestricted file upload
Not analysed yet 13 Jul 2023
CVE-2023-34125 CVE record

SonicWall GMS: Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to…
- SonicWall GMS
- SonicWall Analytics
- CWE-27
Not analysed yet 13 Jul 2023
CVE-2023-34124 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SonicWall GMS: The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient…
- SonicWall GMS
- SonicWall Analytics
- CWE-305
Not analysed yet 13 Jul 2023
CVE-2023-34123 CVE record

Hard-coded cryptographic key in SonicWall GMS and others
- SonicWall GMS
- SonicWall Analytics
- Hard-coded credentials
Not analysed yet 12 Jul 2023