GM
Product
Global Management System
31
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 14High 7Medium 5Low 0
Watch
Add Global Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2396 | 9.9 | Feb 17 | The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute… Affected: 7.2; 8.0; 8.1 |
| CVE-2023-34137 | 9.8 | Jul 13 | SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34136 | 9.8 | Jul 13 | Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34132 | 9.8 | Jul 13 | Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34130 | 9.8 | Jul 13 | SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34128 | 9.8 | Jul 13 | Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2023-34124 | 9.8 | Jul 13 | The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass Affected: before 9.3.2; 9.3.2; 9.3.2 |
| CVE-2022-22280 | 9.8 | Jul 29 | Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics… Affected: before 9.3.1; 9.3.1 |
| CVE-2021-20020 | 9.8 | Apr 10 | A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root Affected: 9.3 |
| CVE-2013-1359 | 9.8 | Feb 11 | An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1,… Affected: 4.1; 5.0; 5.1; 6.0; 7.0 |
| CVE-2013-1360 | 9.8 | Feb 11 | An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1,… Affected: 4.1; 5.0; 5.1; 6.0; 7.0 |
| CVE-2019-7478 | 9.8 | Dec 31 | A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module Affected: 8.4; 8.5; 8.6; 8.7; 9.0; 9.1 |
| CVE-2018-9866 | 9.8 | Aug 3 | A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to… Affected: through 8.1 |
| CVE-2016-2397 | 9.8 | Feb 17 | The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary… Affected: 7.2; 8.0; 8.1 |
Showing 14