Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductEmail Security Virtual Appliance (5a374d96-0299-574b-aa83-dc422ef90744)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20025 vulnerable 2026-06-08 05:29:08.037352 Details available
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall.
Published: 2021-05-13T14:45:12.000Z
Updated: 2024-08-03T17:30:07.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20023 vulnerable 2026-06-08 05:29:08.028447 Details available
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.
Published: 2021-04-20T11:55:13.000Z
Updated: 2025-10-21T23:25:48.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20022 vulnerable 2026-06-08 05:29:08.023705 Details available
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.
Published: 2021-04-09T17:50:15.000Z
Updated: 2025-10-21T23:25:49.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20021 vulnerable 2026-06-08 05:29:08.022398 Details available
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
Published: 2021-04-09T17:50:14.000Z
Updated: 2025-10-21T23:25:49.537Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.