Advisories · Technology
WatchGuard Dimension.
Every CVE that names WatchGuard Dimension among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service
- WatchGuard Dimension
- Cross-site request forgery (CSRF)
- Denial of service
- CVSS 4.8 Medium
Dimension Stored XSS via Trusted CA Certificate Configuration
- WatchGuard Dimension
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Dimension Server-Side Request Forgery via Email Server Test Settings
- WatchGuard Dimension
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Dimension SQL Injection in Scheduled Report
- WatchGuard Dimension
- SQL injection
- Insecure deserialization
- CVSS 5.1 Medium
Dimension Log Server Configuration Lock Bypass Vulnerability
- WatchGuard Dimension
- CWE-841
- CVSS 4.6 Medium
WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page
- WatchGuard Dimension
- Cross-site scripting (XSS)
- CVSS 8.6 High
Dimension SQL Injection in Log Viewer
- WatchGuard Dimension
- SQL injection
- CVSS 5.3 Medium
Dimension Server-Side Request Forgery via Remote Backup Connection Test
- WatchGuard Dimension
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting
- WatchGuard Dimension
- Information disclosure
- Authentication bypass
- CVSS 5.1 Medium
Dimension Stored XSS in Scheduled Report Task
- WatchGuard Dimension
- Cross-site scripting (XSS)
- CVSS 8.4 High
Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint
- WatchGuard Dimension
- Cross-site request forgery (CSRF)
- CVSS 5.1 Medium
Dimension SSRF via FTP Server Test Connection
- WatchGuard Dimension
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs
- WatchGuard Dimension
- Information disclosure
- Privilege escalation
- CVSS 6.9 Medium
Dimension Business Logic Flaw Allows Chained Backend Object Operations
- WatchGuard Dimension
- Broken access control
- CWE-841
- CVSS 5.1 Medium
Dimension Blind SSRF via Database Test Connection Feature
- WatchGuard Dimension
- Server-side request forgery (SSRF)
- CWE-208
- CVSS 8.7 High
Dimension Denial-of-Service
- WatchGuard Dimension
- Denial of service
- CVSS 8.6 High
Dimension SQL Injection in Audit Report
- WatchGuard Dimension
- SQL injection
- Insecure deserialization