Skip to main content

Hosted Email Security

4 CVEs product

Monthly

CVE-2022-2324 Jul 29, 21:15 HIGH This Week

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Sonicwall Authentication Bypass Hosted Email Security
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2021-20023 Apr 20, 12:15 MEDIUM KEV THREAT This Month

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Sonicwall Email Security Email Security Appliance 9000 Firmware Email Security Appliance 3300 Firmware +8
NVD VulDB
CVSS 3.1
4.9
EPSS
51.4%
Threat
4.0
CVE-2021-20022 Apr 09, 18:15 HIGH KEV THREAT Act Now

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Sonicwall File Upload Email Security Email Security Appliance 9000 Firmware Email Security Appliance 3300 Firmware +8
NVD VulDB
CVSS 3.1
7.2
EPSS
16.5%
CVE-2021-20021 Apr 09, 18:15 CRITICAL POC KEV THREAT Emergency

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Sonicwall Email Security Email Security Appliance 9000 Firmware Email Security Appliance 3300 Firmware +8
NVD VulDB
CVSS 3.1
9.8
EPSS
83.4%
Threat
7.5
EPSS 1% CVSS 7.5
HIGH This Week

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Sonicwall Authentication Bypass Hosted Email Security
NVD
EPSS 51% 4.0 CVSS 4.9
MEDIUM KEV THREAT This Month

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Path Traversal Sonicwall Email Security +10
NVD VulDB
EPSS 17% CVSS 7.2
HIGH KEV THREAT Act Now

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Sonicwall File Upload Email Security +10
NVD VulDB
EPSS 83% 7.5 CVSS 9.8
CRITICAL POC KEV THREAT Emergency

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Sonicwall Email Security +10
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy