CVE-2023-34137

<= 2.5.0.4-r7

SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to aut

9.8CRITICAL

CVE-2023-34136

<= 2.5.0.4-r7

Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controll

9.8CRITICAL

CVE-2023-34135

<= 2.5.0.4-r7

Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from th

6.5MEDIUM

CVE-2023-34134

<= 2.5.0.4-r7

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attac

6.5MEDIUM

CVE-2023-34133

<= 2.5.0.4-r7

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics

7.5HIGH

CVE-2023-34132

<= 2.5.0.4-r7

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash atta

9.8CRITICAL

CVE-2023-34131

<= 2.5.0.4-r7

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated

5.3MEDIUM

CVE-2023-34130

<= 2.5.0.4-r7

SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issu

9.8CRITICAL

CVE-2023-34129

<= 2.5.0.4-r7

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows

8.8HIGH

CVE-2023-34128

<= 2.5.0.4-r7

Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1

9.8CRITICAL

CVE-2023-34127

<= 2.5.0.4-r7

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWa

8.8HIGH

CVE-2023-34126

<= 2.5.0.4-r7

Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with ro

8.8HIGH

CVE-2023-34125

<= 2.5.0.4-r7

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying fil

6.5MEDIUM

CVE-2023-34124

<= 2.5.0.4-r7

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass.

9.8CRITICAL

CVE-2023-34123

< 2.5.0.4

Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and ear

7.5HIGH

CVE-2022-22280

<= 2.5.0.3-2520

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacti

9.8CRITICAL

CVE-2021-20032

<= 2.5.2518

SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration vulnerability

9.8CRITICAL