CVE-2018-5691

🗓️ 14 Jan 2018 04:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 75 Views🌐 WEB

SonicWall GMS 8.1 XSS via `/sgms/TreeControl`

Reporter	Title	Published	Views	Family All 11
CNVD	Dell SonicWALL Global Management System Cross-Site Scripting Vulnerability	17 Jan 201800:00	–	cnvd
Cvelist	CVE-2018-5691	14 Jan 201804:00	–	cvelist
EUVD	EUVD-2018-17460	7 Oct 202500:30	–	euvd
NVD	CVE-2018-5691	14 Jan 201804:29	–	nvd
osv_cve	CVE-2018-5691	14 Jan 201804:29	–	osv_cve
Prion	Design/Logic Flaw	14 Jan 201804:29	–	prion
Positive Technologies	PT-2018-17088	14 Jan 201800:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2018-5691: Improper Neutralization of Input During Web Page Generation	14 Jan 201800:00	–	rapid7
SonicWall	SonicWall Global Management System (GMS) 8.1 cross-site scripting	14 Jan 201804:29	–	sonicwall
Vulnerability Lab	SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability	12 Jan 201800:00	–	vulnerlab

NVD

Node

OR

sonicwall analyzerRange7.0–7.2

sonicwall analyzerRange8.1–8.4

sonicwall global_management_systemRange7.0–7.2

sonicwall global_management_systemRange8.1–8.4

Source	Link
documents	www.documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003
vulnerability-lab	www.vulnerability-lab.com/get_content.php

Parameter	Position	Path	Description	CWE
newName	request body	/sgms/TreeControl	XSS via the newName and Name values of the /sgms/TreeControl module POST method request.	CWE-79
name	request body	/sgms/TreeControl	XSS via the newName and Name values of the /sgms/TreeControl module POST method request.	CWE-79

17 Jun 2026 02:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 35.4

EPSS0.00708

cve-2018-5691 sonicwall gms xss treecontrol security vulnerability