Approved changes feed: RSS · Atom
cpe:2.3:a:sonicwall:gms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676) |
|---|---|
| Product | Gms (01feb8bb-29d2-5292-bdba-7ce35f4158e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-29011 |
vulnerable | 2026-06-08 06:33:28.358987 |
Details available
HIGH (7.5)
Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability.
This issue affects GMS: 9.3.4 and earlier versions.
Published: 2024-05-01T18:19:46.896Z
Updated: 2025-12-16T18:13:23.266Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29010 |
vulnerable | 2026-06-08 06:33:28.357261 |
Details available
HIGH (7.1)
The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially resulting in the disclosure of sensitive information.
This issue affects GMS: 9.3.4 and earlier versions.
Published: 2024-05-01T18:12:53.853Z
Updated: 2024-08-02T01:03:51.475Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34137 |
vulnerable | 2026-06-08 06:06:24.563282 |
Details available
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:43:08.405Z
Updated: 2024-10-30T18:49:22.304Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34136 |
vulnerable | 2026-06-08 06:06:24.562850 |
Details available
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:40:20.667Z
Updated: 2024-10-30T18:50:27.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34135 |
vulnerable | 2026-06-08 06:06:24.562224 |
Details available
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:37:59.279Z
Updated: 2024-10-30T18:52:08.987Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34134 |
vulnerable | 2026-06-08 06:06:24.561731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34133 |
vulnerable | 2026-06-08 06:06:24.561021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34132 |
vulnerable | 2026-06-08 06:06:24.560576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34131 |
vulnerable | 2026-06-08 06:06:24.560191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34130 |
vulnerable | 2026-06-08 06:06:24.559704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34129 |
vulnerable | 2026-06-08 06:06:24.559193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34128 |
vulnerable | 2026-06-08 06:06:24.558790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34127 |
vulnerable | 2026-06-08 06:06:24.558126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34126 |
vulnerable | 2026-06-08 06:06:24.557584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34125 |
vulnerable | 2026-06-08 06:06:24.557010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34124 |
vulnerable | 2026-06-08 06:06:24.553637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34123 |
vulnerable | 2026-06-08 06:06:24.546473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7478 |
vulnerable | 2026-06-08 05:14:14.483915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.