DI
Product
Dimension
17
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 10Low 0
Watch
Add Dimension to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78174 | 9.3 | Aug 27 | WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs Affected: 2.0 before 2.3.1 |
| CVE-2026-13108 | 8.7 | Aug 27 | Dimension Denial-of-Service Affected: 2.0 before 2.3.1 |
| CVE-2026-78612 | 8.6 | Aug 27 | Dimension SQL Injection in Scheduled Report Affected: 2.0 before 2.3.1 |
| CVE-2026-78613 | 8.6 | Aug 27 | Dimension SQL Injection in Log Viewer Affected: 2.0 before 2.3.1 |
| CVE-2026-78614 | 8.6 | Aug 27 | Dimension SQL Injection in Audit Report Affected: 2.0 before 2.3.1 |
| CVE-2026-78610 | 8.4 | Aug 27 | Dimension CSRF Vulnerability in Administrator Passphrase Change Endpoint Affected: 2.0 before 2.3.1 |
| CVE-2026-86135 | 7.0 | Sep 8 | Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of Service Affected: 2.0 before 2.3.1 |
| CVE-2026-78618 | 6.9 | Aug 27 | Dimension Business Logic Flaw Allows Chained Backend Object Operations Affected: 2.0 before 2.3.1 |
| CVE-2026-78617 | 6.3 | Aug 27 | WatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting Affected: 2.0 before 2.3.1 |
| CVE-2026-78495 | 5.3 | Aug 27 | Dimension Server-Side Request Forgery via Remote Backup Connection Test Affected: 2.0 before 2.3.1 |
| CVE-2026-78498 | 5.1 | Aug 27 | Dimension Server-Side Request Forgery via Email Server Test Settings Affected: 2.0 before 2.3.1 |
| CVE-2026-78103 | 5.1 | Aug 27 | Dimension Log Server Configuration Lock Bypass Vulnerability Affected: 2.0 before 2.3.1 |
| CVE-2026-78047 | 5.1 | Aug 27 | Dimension Stored XSS in Scheduled Report Task Affected: 2.0 before 2.3.1 |
| CVE-2026-78499 | 5.1 | Aug 27 | Dimension SSRF via FTP Server Test Connection Affected: 2.0 before 2.3.1 |
| CVE-2026-78500 | 5.1 | Aug 27 | Dimension Blind SSRF via Database Test Connection Feature Affected: 2.0 before 2.3.1 |
| CVE-2026-78616 | 4.8 | Aug 27 | Dimension Stored XSS via Trusted CA Certificate Configuration Affected: 2.0 before 2.3.1 |
| CVE-2026-78615 | 4.6 | Aug 27 | WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page Affected: 2.0 before 2.3.1 |
Showing 17