Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductEmail Security (11fcd237-ee2c-51c8-a85d-014e863e7286)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3470 vulnerable 2026-06-08 08:01:18.815298 Details available
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.
Published: 2026-03-31T20:19:38.338Z
Updated: 2026-03-31T20:34:15.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3469 vulnerable 2026-06-08 08:01:18.814468 Details available
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.
Published: 2026-03-31T20:18:32.521Z
Updated: 2026-03-31T20:34:53.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3468 vulnerable 2026-06-08 08:01:18.809450 Details available
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.
Published: 2026-03-31T20:17:11.236Z
Updated: 2026-03-31T20:35:38.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40605 vulnerable 2026-06-08 07:25:05.272942 Details available
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.
Published: 2025-11-20T12:19:17.871Z
Updated: 2025-11-20T18:30:31.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40604 vulnerable 2026-06-08 07:25:05.261757 Details available
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.
Published: 2025-11-20T12:17:14.138Z
Updated: 2026-02-26T16:07:45.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22398 vulnerable 2026-06-08 06:29:34.862506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0655 vulnerable 2026-06-08 05:52:32.182801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2324 vulnerable 2026-06-08 05:43:35.319594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45105 vulnerable 2026-06-08 05:36:47.831051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45046 vulnerable 2026-06-08 05:36:47.745584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44228 vulnerable 2026-06-08 05:36:45.259885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3450 vulnerable 2026-06-08 05:33:52.221042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20023 vulnerable 2026-06-08 05:29:08.024246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20022 vulnerable 2026-06-08 05:29:08.023012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20021 vulnerable 2026-06-08 05:29:08.010486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.