Possible DOM XSS in SNS Web Administration Portal

Stored XSS in the VPN logs monitor

An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through 4.6.8, and 4.7.0

Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal

Timing Oracle in RSA Decryption

Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component

The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files

Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.

An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier,…

An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used)

A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to…

An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39, 3.10.0 through 3.11.26 before 3.11.27, 4.0 through 4.3.21 before 4.3.22, and…

An issue was discovered in Stormshield SNS 3.8.0

Possible XSS in the SNS web administration panel

Information leak in NSRPC client history

Connection possible to the Administration portal with a revoked certificate