Vendor
SonicWall
221 known vulnerabilities.
Products
SonicOS 75
SMA100 26
GMS 24
SMA1000 19
Analytics 15
NetExtender 11
SonicWall SMA100 11
Email Security 11
SonicWall Global VPN Client 5
SonicOSv 5
Network Security Manager (NSM) 5
Global Management System (GMS) 5
SMA 100 Series 4
SonicWall SMA1000 4
Connect Tunnel 3
SonicWall SRA/SMA100 3
SonicWall Switch 2
SonicWall Analytics On-Prem 2
SonicWall NetExtender 2
Directory Services Connector 2
Email Security Appliance 2
SonicWall GMS 2
SonicWall Email Security 2
SonicWall NetExtender Windows (32 and 64 bit) Client 1
Capture Client 1
SonicWall NSM On-Prem 1
Global VPN Client 1
Email Security Virtual Appliance 1
GMS < 9.3.3 0
SMA 1000 Series Firmware 0
SMA 0
SMA Mobile Connect 0
SMA Connect Tunnel 0
SMA NetExtender 0
SMA 1000 0
SMA 100 0
sma100_firmware 0
sonicwall_sonicos__5.9.2.14-13o 0
sonicwall_sonicos__6.5.2.8-2n 0
sonicwall_sonicos__6.5.4.15.116n 0
60 results · Clear filters · Feed
-
High 7.5
A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allo…
-
High 7.8
The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 1…
-
High 7.5
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause De…
-
High 7.1
Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an at…
-
High 7.5
Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects G…
-
High 7.1
The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentiall…
-
High 8.3
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allow…
-
High 7.2
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated at…
KEV May 1, 2025 -
High 8.8
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to e…
-
High 8.8
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windo…
-
High 7.8
A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versio…
-
High 7.5
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and…
-
High 8.8
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall G…
-
High 8.8
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use exc…
-
High 7.5
Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated att…
-
High 7.5
SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web…
-
High 8.8
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method all…
-
High 7.2
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …
KEV Nov 3, 2021 -
High 7.5CVE-2019-7483 Exploited
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user …
KEV Mar 28, 2022 -
High 7.5
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This v…
KEV Nov 3, 2021