Lucene search
+L

7 matches found

Check Point Advisories
Check Point Advisories
•added 2022/01/16 12:00 a.m.•38 views

SonicWall Email Security Directory Traversal (CVE-2021-20023)

A directory traversal vulnerability exists in SonicWall Email Security. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

4CVSS5.5AI score0.51407EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2021/11/03 12:00 a.m.•69 views

SonicWall Email Security Improper Privilege Management Vulnerability

SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-200...

9.8CVSS7.2AI score0.8867EPSS
SaveIn wildExploits0
The Hacker News
The Hacker News
•added 2021/04/21 5:07 a.m.•164 views

3 Zero-Day Exploits Hit SonicWall Enterprise Email Security Appliances

SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security ES product that are being actively exploited in the wild. Tracked as CVE-2021-20021 and CVE-2021-20022, the flaws were discovered and reported to the company by FireEye's Mandiant subsidia...

9.8CVSS0.9AI score0.8867EPSS
SaveExploits0
Circl
Circl
•added 2021/04/21 1:32 a.m.•19 views

CVE-2021-20023

creationtimestamp| type| source ---|---|--- 2021-04-21 01:32:05+00:00| seen| https://t.me/cKure/4953 2021-04-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=572 2021-04-22 15:55:13+00:00| exploited| https://t.me/NeKaspersky/777 2021-11-08 08:58:19+00:00| seen|...

4.9CVSS6.8AI score0.51407EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2021/04/20 11:55 a.m.•13 views

CVE-2021-20023

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host...

5.1AI score0.51407EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/20 11:55 a.m.•1134 views

CVE-2021-20023

The CVE-2021-20023 entry affects SonicWall Email Security (version 10.0.9.x). Connected advisories describe a directory traversal/path traversal vulnerability that, when exploited by a post-authenticated attacker, could allow reading arbitrary files on the remote host. Evidence from advisories an...

4.9CVSS6.9AI score0.51407EPSS
SaveIn wildExploits0References2Affected Software1
SonicWall
SonicWall
•added 2021/04/20 11:12 a.m.•18 views

SonicWall Email Security post-authentication arbitrary file read vulnerability

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. CVE: CVE-2021-20023 Last updated: April 20, 2021, 11:12 a.m...

6.7CVSS6.7AI score0.51407EPSS
SaveExploits0
Rows per page
Query Builder