GMS at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 6 | 2 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 9.1WID-SEC-2026-4354 2 CVEs
SonicWall GMS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SonicWall GMS ausnutzen, um Informationen offenzulegen und SQL-Injection-Angriffe durchzuführen.
-
High max 9.4WID-SEC-2026-2764 6 CVEs
SonicWall GMS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SonicWall GMS ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code – einschließlich Code mit Root-Rechten – auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen off…
-
Medium max 7.5WID-SEC-2024-1004 2 CVEs
SonicWall GMS: Mehrere Schwachstellen
Ein entfernter Angreifer kann mehrere Schwachstellen in SonicWall GMS ausnutzen, um Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
24 results · Feed
-
High 8.4
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (…
-
High 8.3
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.…
-
Medium 6.3
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1…
-
Critical 9.4
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlie…
-
Medium 6.1
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions…
-
Critical 9.1
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versio…
-
High 7.5
Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects G…
-
High 7.1
The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentiall…
-
Unscored —
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks lea…
-
Unscored —
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location n…
-
Unscored —
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary fi…
-
Unscored —
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenti…
-
High 7.5
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and…
-
Unscored —CVE-2023-34132 Public exploit
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-th…
-
Unscored —
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unau…
-
Unscored —
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data…
-
Unscored —CVE-2023-34129 EPSS 41%
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analy…
-
Unscored —
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS:…
-
High 8.8
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall G…
-
Unscored —
Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesys…
-
Unscored —CVE-2023-34125 EPSS 24%
Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the und…
-
Critical 9.8
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…
-
Unscored —
Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-…
-
Unscored —
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GM…