📦

global_management_system

Vendor: sonicwall

Actively Exploited 0 CISA KEV List
PoC / Exploits 5 Code Available
Total RCEs 6 Remote Access
Total CVEs 43 Total Indexed
Avg. EPSS 20.62% Exploit Prob.
Latest CVE CVE-2023-34137 Jul 13

Security Vulnerability Index

Page 4 / 5
4.3 CVSS

Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to inject arbitrary web script or HTML via the node_id parameter in a ScreenDisplayManager genNetwork action.

EPSS: 1.77%
3.5 CVSS
CVE-2013-7025
Exploit Found

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.

EPSS: 3.10%