Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:global_management_system:9.3.2:-:*:*:*:*:*:*

part: a version: 9.3.2 update: -

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductGlobal Management System (d15cb6ce-4124-5d94-9ab3-1152391656fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34137 vulnerable 2026-06-08 06:06:24.563351 Details available
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:43:08.405Z
Updated: 2024-10-30T18:49:22.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34136 vulnerable 2026-06-08 06:06:24.562965 Details available
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:40:20.667Z
Updated: 2024-10-30T18:50:27.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34135 vulnerable 2026-06-08 06:06:24.562388 Details available
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:37:59.279Z
Updated: 2024-10-30T18:52:08.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34134 vulnerable 2026-06-08 06:06:24.561882 Details available
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:35:41.109Z
Updated: 2024-10-30T18:52:38.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34133 vulnerable 2026-06-08 06:06:24.561309 Details available
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:28:35.751Z
Updated: 2025-04-23T16:20:21.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34132 vulnerable 2026-06-08 06:06:24.560652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34131 vulnerable 2026-06-08 06:06:24.560263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34130 vulnerable 2026-06-08 06:06:24.559877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34129 vulnerable 2026-06-08 06:06:24.559272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34128 vulnerable 2026-06-08 06:06:24.558866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34127 vulnerable 2026-06-08 06:06:24.558292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34126 vulnerable 2026-06-08 06:06:24.557759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34125 vulnerable 2026-06-08 06:06:24.557108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34124 vulnerable 2026-06-08 06:06:24.556022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.