GM
Product
Global Management System
31
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 14High 7Medium 5Low 0
Watch
Add Global Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2396 | 9.9 | Feb 17 | The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute… Affected: 7.2; 8.0; 8.1 |
| CVE-2023-34137 | 9.8 | Jul 13 | SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34136 | 9.8 | Jul 13 | Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34132 | 9.8 | Jul 13 | Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34130 | 9.8 | Jul 13 | SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34128 | 9.8 | Jul 13 | Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34124 | 9.8 | Jul 13 | The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2022-22280 | 9.8 | Jul 29 | Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics… Affected: before 9.3.1; 9.3.1 |
| CVE-2021-20020 | 9.8 | Apr 10 | A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root Affected: 9.3 |
| CVE-2013-1359 | 9.8 | Feb 11 | An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1,… Affected: 4.1; 5.0; 5.1; 6.0; 7.0 |
| CVE-2013-1360 | 9.8 | Feb 11 | An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1,… Affected: 4.1; 5.0; 5.1; 6.0; 7.0 |
| CVE-2019-7478 | 9.8 | Dec 31 | A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module Affected: 8.4; 8.5; 8.6; 8.7; 9.0; 9.1 |
| CVE-2018-9866 | 9.8 | Aug 3 | A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to… Affected: through 8.1 |
| CVE-2016-2397 | 9.8 | Feb 17 | The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary… Affected: 7.2; 8.0; 8.1 |
| CVE-2023-34129 | 8.8 | Jul 13 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the… Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34127 | 8.8 | Jul 13 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to… Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34126 | 8.8 | Jul 13 | Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2019-7476 | 8.1 | Apr 26 | A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key Affected: through 8.3; 8.4; 8.6; 8.7; 9.0; 9.1 |
| CVE-2023-34133 | 7.5 | Jul 13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract… Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34123 | 7.5 | Jul 13 | Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics Affected: before 9.3.2; before 9.3.2; 9.3.2; 9.3.2; 9.3.2; 9.3.2 |
| CVE-2021-20030 | 7.5 | Oct 13 | SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and… Affected: before 9.3.2 |
| CVE-2023-34135 | 6.5 | Jul 13 | Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34134 | 6.5 | Jul 13 | Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web… Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34125 | 6.5 | Jul 13 | Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2018-5691 | 5.4 | Jan 14 | SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module Affected: 7.0 through 7.2; 8.1 through 8.4 |
| CVE-2023-34131 | 5.3 | Jul 13 | Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker to access restricted web pages Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2015-3990 | – | May 20 | The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via… Affected: through 7.2 |
| CVE-2014-8420 | – | Nov 25 | The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote… Affected: 7.2 |
| CVE-2014-5024 | – | Jul 24 | Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or… Affected: through 7.2 |
| CVE-2014-0332 | – | Feb 14 | Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow… Affected: 7.0; 7.1; 7.1; 7.0; 7.1; 7.1 |
| CVE-2013-7025 | – | Dec 9 | Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA… Affected: 7.0; 7.1; 7.1 |
Showing 31