GCVE - cpe:2.3:h:sonicwall:uma_em5000:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:sonicwall:uma_em5000:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Sonicwall (`28e2a9d1-aad2-54b9-a84d-b04e317de676`)
Product	Uma Em5000 (`6b7e5f28-1078-50b0-90f5-012935562c7b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-2397`	not_vulnerable	2026-06-08 05:07:42.095811	Details available The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data. Published: 2016-02-17T15:00:00.000Z Updated: 2024-08-05T23:24:49.292Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-16-163 http://www.securitytracker.com/id/1035015 https://support.software.dell.com/product-notification/185943	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2396`	not_vulnerable	2026-06-08 05:07:42.095139	Details available The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input. Published: 2016-02-17T15:00:00.000Z Updated: 2024-08-05T23:24:49.299Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1035015 http://www.zerodayinitiative.com/advisories/ZDI-16-164 https://support.software.dell.com/product-notification/185943	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3990`	not_vulnerable	2026-06-08 05:06:38.952284	Details available The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration. Published: 2015-05-20T18:00:00.000Z Updated: 2024-08-06T06:04:02.256Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1032373 https://support.software.dell.com/product-notification/152178 http://www.zerodayinitiative.com/advisories/ZDI-15-231/ http://www.securityfocus.com/bid/74756	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8420`	vulnerable	2026-06-08 05:06:08.727137	Details available The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors. Published: 2014-11-25T15:00:00.000Z Updated: 2024-08-06T13:18:47.985Z Open on db.gcve.eu Reference links https://support.software.dell.com/product-notification/136814 https://exchange.xforce.ibmcloud.com/vulnerabilities/98911 http://www.zerodayinitiative.com/advisories/ZDI-14-385/ http://www.securityfocus.com/bid/71241	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5024`	vulnerable	2026-06-08 05:05:46.704941	Details available Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id parameter. Published: 2014-07-24T14:00:00.000Z Updated: 2024-08-06T11:34:37.131Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/68829 https://support.software.dell.com/product-notification/128245 http://seclists.org/fulldisclosure/2014/Jul/125 http://secunia.com/advisories/60287 http://packetstormsecurity.com/files/127575/SonicWALL-GMS-7.2-Build-7221.1701-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.