ES
Product
Email Security
On CISA KEVExploited in the wildRansomware-linked
15
CVEs
5
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 5Low 2
Watch
Add Email Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44228 RansomwareIn wildKEV | 10.0 | Dec 10 | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints Affected: before 10.0.13 |
| CVE-2021-20021 RansomwareIn wildKEV | 9.8 | Apr 9 | SonicWall Email Security Improper Privilege Management Vulnerability Affected: 10.0.9 and earlier |
| CVE-2021-45046 RansomwareIn wildKEV | 9.0 | Dec 14 | Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack Affected: before 10.0.12 |
| CVE-2021-20022 RansomwareIn wildKEV | 7.2 | Apr 9 | SonicWall Email Security Unrestricted Upload of File Vulnerability Affected: 10.0.9 and earlier |
| CVE-2021-20023 RansomwareIn wildKEV | 4.9 | Apr 20 | SonicWall Email Security Path Traversal Vulnerability Affected: 10.0.9 and earlier |
| CVE-2025-40604 | 9.8 | Nov 20 | Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with… Affected: 10.0.33.8195 and earlier versions |
| CVE-2026-66150 | 7.8 | Aug 11 | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall… Affected: 10.0.35.8405 and earlier versions |
| CVE-2026-66149 | 7.8 | Aug 11 | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall… Affected: 10.0.35.8405 and earlier versions |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: before 10.0.11 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: through 10.0.12 |
| CVE-2025-40605 | 5.3 | Nov 20 | A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal… Affected: 10.0.33.8195 and earlier versions |
| CVE-2023-0655 | 5.3 | Feb 14 | SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email… Affected: through 10.0.19.7431 |
| CVE-2026-3468 | 4.8 | Mar 31 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web… Affected: 10.0.34.8215 and earlier versions; 10.0.34.8223 and earlier versions |
| CVE-2026-3470 | 3.8 | Mar 31 | A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as… Affected: 10.0.34.8215 and earlier versions; 10.0.34.8223 and earlier versions |
| CVE-2026-3469 | 2.7 | Mar 31 | A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user… Affected: 10.0.34.8215 and earlier versions; 10.0.34.8223 and earlier versions |
Showing 15