Advisories · Technology
Stormshield Network Security.
Every CVE that names Stormshield Network Security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Stored XSS in the VPN logs monitor
- Stormshield Network Security
- Cross-site scripting (XSS)
- CVSS 7.0 High
Stored XSS on SNS Enrollment Portal
- Stormshield Network Security
- Cross-site scripting (XSS)
- CVSS 7.1 High
Stored XSS on SNS Enrollment Portal
- Stormshield Network Security
- Cross-site scripting (XSS)
- CVSS 7.5 High
Improper Signature Verification of Active Update Files
- Stormshield Network Security
- Authentication bypass
- CVSS 6.6 Medium
Possible DOM XSS in SNS Web Administration Portal
- Stormshield Network Security
- Cross-site scripting (XSS)
- CVSS 7.8 High
Improper Signature Verification of Firmware Update Files
- Stormshield Network Security
- Authentication bypass
- CVSS 4.3 Medium
Possible XSS in the SNS web administration panel
- Stormshield Network Security
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Information leak in NSRPC client history
- Stormshield Network Security
- Information disclosure
- CVSS 4.3 Medium
Connection possible to the Administration portal with a revoked certificate
- Stormshield Network Security
- Weak cryptography or TLS
- CVSS 5.3 Medium
Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.
- StormShield Network Security
- Cross-site scripting (XSS)