Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductAnalytics (8a5b7aff-17c7-5231-bd6d-d83f8f3c1229)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34137 vulnerable 2026-06-08 06:06:24.563309 Details available
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:43:08.405Z
Updated: 2024-10-30T18:49:22.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34136 vulnerable 2026-06-08 06:06:24.562880 Details available
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:40:20.667Z
Updated: 2024-10-30T18:50:27.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34135 vulnerable 2026-06-08 06:06:24.562342 Details available
Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:37:59.279Z
Updated: 2024-10-30T18:52:08.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34134 vulnerable 2026-06-08 06:06:24.561761 Details available
Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:35:41.109Z
Updated: 2024-10-30T18:52:38.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34133 vulnerable 2026-06-08 06:06:24.561050 Details available
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Published: 2023-07-13T02:28:35.751Z
Updated: 2025-04-23T16:20:21.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34132 vulnerable 2026-06-08 06:06:24.560608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34131 vulnerable 2026-06-08 06:06:24.560222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34130 vulnerable 2026-06-08 06:06:24.559732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34129 vulnerable 2026-06-08 06:06:24.559226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34128 vulnerable 2026-06-08 06:06:24.558823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34127 vulnerable 2026-06-08 06:06:24.558161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34126 vulnerable 2026-06-08 06:06:24.557714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34125 vulnerable 2026-06-08 06:06:24.557057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34124 vulnerable 2026-06-08 06:06:24.553782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34123 vulnerable 2026-06-08 06:06:24.547211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.