Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:global_management_system:9.3.2:sp1:*:*:*:*:*:*

part: a version: 9.3.2 update: sp1

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductGlobal Management System (d15cb6ce-4124-5d94-9ab3-1152391656fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34137 vulnerable 2026-06-08 06:06:24.563480 Details available
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:43:08.405Z
Updated: 2024-10-30T18:49:22.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34136 vulnerable 2026-06-08 06:06:24.562986 Details available
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:40:20.667Z
Updated: 2024-10-30T18:50:27.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34135 vulnerable 2026-06-08 06:06:24.562407 Details available
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:37:59.279Z
Updated: 2024-10-30T18:52:08.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34134 vulnerable 2026-06-08 06:06:24.561906 Details available
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:35:41.109Z
Updated: 2024-10-30T18:52:38.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34133 vulnerable 2026-06-08 06:06:24.561329 Details available
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:28:35.751Z
Updated: 2025-04-23T16:20:21.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34132 vulnerable 2026-06-08 06:06:24.560670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34131 vulnerable 2026-06-08 06:06:24.560281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34130 vulnerable 2026-06-08 06:06:24.559896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34129 vulnerable 2026-06-08 06:06:24.559406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34128 vulnerable 2026-06-08 06:06:24.558883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34127 vulnerable 2026-06-08 06:06:24.558390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34126 vulnerable 2026-06-08 06:06:24.557778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34125 vulnerable 2026-06-08 06:06:24.557248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34124 vulnerable 2026-06-08 06:06:24.556588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.