Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductGlobal Management System (d15cb6ce-4124-5d94-9ab3-1152391656fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-29010 vulnerable 2026-06-08 06:33:28.358329 Details available
HIGH (7.1)
The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially resulting in the disclosure of sensitive information. This issue affects GMS: 9.3.4 and earlier versions.
Published: 2024-05-01T18:12:53.853Z
Updated: 2024-08-02T01:03:51.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34137 vulnerable 2026-06-08 06:06:24.563333 Details available
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:43:08.405Z
Updated: 2024-10-30T18:49:22.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34136 vulnerable 2026-06-08 06:06:24.562944 Details available
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:40:20.667Z
Updated: 2024-10-30T18:50:27.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34135 vulnerable 2026-06-08 06:06:24.562367 Details available
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:37:59.279Z
Updated: 2024-10-30T18:52:08.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34134 vulnerable 2026-06-08 06:06:24.561783 Details available
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:35:41.109Z
Updated: 2024-10-30T18:52:38.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34133 vulnerable 2026-06-08 06:06:24.561173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34132 vulnerable 2026-06-08 06:06:24.560632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34131 vulnerable 2026-06-08 06:06:24.560244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34130 vulnerable 2026-06-08 06:06:24.559754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34129 vulnerable 2026-06-08 06:06:24.559250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34128 vulnerable 2026-06-08 06:06:24.558846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34127 vulnerable 2026-06-08 06:06:24.558184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34126 vulnerable 2026-06-08 06:06:24.557739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34125 vulnerable 2026-06-08 06:06:24.557086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34124 vulnerable 2026-06-08 06:06:24.555104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22280 vulnerable 2026-06-08 05:40:08.074433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20030 vulnerable 2026-06-08 05:29:08.106746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7476 vulnerable 2026-06-08 05:14:14.476816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9866 vulnerable 2026-06-08 05:12:08.342988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5691 vulnerable 2026-06-08 05:11:51.604836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3990 vulnerable 2026-06-08 05:06:38.953366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5024 vulnerable 2026-06-08 05:05:46.704267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.