Advisories · Technology
SonicWall Email Security.
Every CVE that names SonicWall Email Security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Code injection in SonicWall Email Security
- SonicWall Email Security
- Code injection
- CVSS 7.8 High
Code injection in SonicWall Email Security
- SonicWall Email Security
- Code injection
- CVSS 3.8 Low
Improper input validation in SonicWall Email Security
- SonicWall Email Security
- CWE-20
- CVSS 2.7 Low
Improper input validation in SonicWall Email Security
- SonicWall Email Security
- CWE-20
- CVSS 4.8 Medium
Cross-site scripting in SonicWall Email Security
- SonicWall Email Security
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Path traversal in SonicWall Email Security
- SonicWall Email Security
- Path traversal
- CVSS 6.5 Medium
Download of code without integrity check in SonicWall Email Security
- SonicWall Email Security
- CWE-494
- CVSS 4.9 Medium
Path traversal in SonicWall Email Security
- SonicWall Email Security
- Path traversal
- CVSS 5.3 Medium
Sensitive information in error messages in SonicWall Email Security
- SonicWall Email Security
- Information disclosure
-
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance.
- SonicWall Email Security
- CWE-358
- CVSS 4.9 MediumCritical · KEVKEV · ransomware
Path traversal in SonicWall Email Security
- SonicWall Email Security
- Path traversal
- CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Unrestricted file upload in SonicWall Email Security
- SonicWall Email Security
- Unrestricted file upload
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Improper privilege management in SonicWall Email Security
- SonicWall Email Security
- Privilege escalation