CVE-2018-5691

The CVE-2018-5691 entry concerns Dell SonicWall Global Management System (GMS) v8.1. Affected component: the /sgms/TreeControl module; vulnerability type: Cross-Site Scripting (XSS) via the values of newName and Name. Root cause is an input handling flaw that allows malicious script injection thr...

PT-2018-17088

Name of the Vulnerable Software and Affected Versions: SonicWall Global Management System GMS version 8.1 Description: The issue concerns an XSS vulnerability. It is exploited via the newName and Name values of the "/sgms/TreeControl" module. Recommendations: For SonicWall Global Management Syste...

SonicWall GMS 8.1 Filter Bypass / Input Validation

Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...

SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability

Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...

SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability

Document Title: =============== SonicWall GMS v8.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1819 Release Notes:...

Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...

Dell SonicWALL Global Management System (GMS) 8.1 Adobe Flex SOP Bypass

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...

Dell SonicWALL Global Management System GMS 8.1 XSS Vulnerabilities

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...

Dell SonicWALL GMS-Analyzer license.jsp Information Disclosure

An information disclosure vulnerability exists in the license.jsp component of Dell SonicWALL GMS, Analyzer. The vulnerability is due to a design weakness where the page containing sensitive information, license.jsp, can be accessed without authentication. This page returns the serial number for...

SonicWALL GMS / Analyzer 8.x < 8.2 Multiple SQLi Vulnerabilities

SonicWALL GMS / Analyzer are prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

SonicWall Global Management System (GMS) / Universal Management Suite (USM) / Analyzer / Analytics Detection (HTTP)

HTTP based detection of Dell SonicWALL Global Management System GMS / Universal Management Suite USM / Analyzer / Analytics. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SonicWALL Global Management System (GMS) 8.x < 8.2 Multiple Vulnerabilities

The version of SonicWALL Global Management System GMS running on the remote host is 8.x prior to 8.2. It is, therefore, affected by multiple vulnerabilities : - A SQL injection SQLi vulnerability exists in the ImagePreviewServlet servlet due to improper sanitization of user-supplied input to the...

Dell SonicWALL Global Management System GMS 8.1 Cross Site Scripting Vulnerability

Dell SonicWALL Global Management System GMS version 8.1 suffers from multiple cross site scripting vulnerabilities. i? Dell SonicWALL Global Management System GMS 8.1 XSS Vulnerabilities Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8....

Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vulnerability

Dell SonicWALL GMS versions 8.1 and below are compiled with a vulnerable version of Adobe Flex SDK allowing for same-origin request forgery and cross-site content hijacking i? Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vendor: Dell Inc. Product web page:...

Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection

i? Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual Appliance Fixed in: 8.2 VR-2016-01-C0V Summary: Provide your organization,...

Dell SonicWALL Global Management System GMS 8.1 Cross Site Scripting

i? Dell SonicWALL Global Management System GMS 8.1 XSS Vulnerabilities Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual Appliance Analyzer Virtual Appliance Fixed in: 8.2 VR-2016-01-C1D Summary:...

Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass

i? Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual Appliance Fixed in: 8.2 VR-2016-01-C1F Summary: Provide your organizatio...

Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection Vulnerability

Exploit for hardware platform in category web applications Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual Appliance Fixed in...

Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection

Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection Vendor: Dell Inc. Product web page: https://www.sonicwall.com/products/sonicwall-gms/ Affected version: 8.1 8.0 SP1 Build 8048.1410 Flow Server Virtual...

Dell SonicWALL Global Management System GMS 8.1 Blind SQL Injection

Summary Provide your organization, distributed enterprise or managed service offering with an intuitive, powerful way to rapidly deploy and centrally manage SonicWall solutions, with SonicWall GMS. Get more value from your firewall, secure remote access, anti-spam, and backup and recovery solutio...