sonicwall global management system

Name: sonicwall global management system
Brand: sonicwall

productUS

cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

14critical9high8medium1low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-1359US	critical9.8	89.4% (100th)	Exploit	no fix	2020-02-11	5 versions
CVE-2023-34127US	high8.8	85.8% (100th)	Exploit	9.3.2	2023-07-13	2 versions
CVE-2023-34133US	high7.5	72.8% (99th)	Exploit	9.3.2	2023-07-13	2 versions
CVE-2018-3639US	medium5.5	60.6% (99th)	Exploit	no fix	2018-05-22	—
CVE-2023-34124US	critical9.8	50.5% (99th)	Exploit	9.3.2	2023-07-13	2 versions
CVE-2014-8420US	high9.0	24.0% (98th)	Exploit	no fix	2014-11-25	= 7.2
CVE-2013-1360US	critical9.8	23.2% (98th)	Exploit	no fix	2020-02-11	5 versions
CVE-2023-34132US	critical9.8	7.74% (95th)	Exploit	9.3.2	2023-07-13	2 versions
CVE-2013-7025US	low3.5	4.34% (91st)	Exploit	no fix	2013-12-09	2 versions
CVE-2023-34129US	high8.8	41.4% (99th)	—	9.3.2	2023-07-13	2 versions
CVE-2023-34125US	medium6.5	23.6% (98th)	—	9.3.2	2023-07-13	2 versions
CVE-2022-22280US	critical9.8	9.81% (96th)	—	9.3.1	2022-07-29	2 versions
CVE-2016-2397US	critical9.8	6.44% (94th)	—	no fix	2016-02-17	3 versions
CVE-2016-2396US	critical9.9	4.75% (92nd)	—	no fix	2016-02-17	3 versions
CVE-2018-9866US	critical9.8	4.50% (91st)	—	no fix	2018-08-03	≤ 8.1
CVE-2021-20020US	critical9.8	3.73% (90th)	—	no fix	2021-04-10	= 9.3
CVE-2014-0332US	medium4.3	2.76% (86th)	—	no fix	2014-02-14	2 versions
CVE-2015-3990US	high9.0	2.67% (86th)	—	no fix	2015-05-20	≤ 7.2
CVE-2014-5024US	medium4.3	1.63% (76th)	—	no fix	2014-07-24	≤ 7.2
CVE-2023-34135US	medium6.5	1.57% (75th)	—	9.3.2	2023-07-13	2 versions
CVE-2019-7476US	high8.1OT elevated	1.36% (72nd)	—	no fix	2019-04-26	6 versions
CVE-2023-34134US	medium6.5	1.13% (66th)	—	9.3.2	2023-07-13	2 versions
CVE-2019-7478US	critical9.8	1.11% (66th)	—	no fix	2019-12-31	6 versions
CVE-2023-34137US	critical9.8	1.01% (63rd)	—	9.3.2	2023-07-13	2 versions
CVE-2021-20030US	high7.5	0.96% (61st)	—	9.3.2	2022-10-13	< 9.3.2
CVE-2023-34131US	medium5.3	0.83% (57th)	—	9.3.2	2023-07-13	2 versions
CVE-2023-34123US	high7.5OT elevated	0.81% (57th)	—	9.3.2	2023-07-13	2 versions
CVE-2023-34136US	critical9.8	0.80% (56th)	—	9.3.2	2023-07-13	2 versions
CVE-2023-34126US	high8.8	0.76% (55th)	—	9.3.2	2023-07-13	2 versions
CVE-2018-5691US	medium5.4	0.71% (53rd)	—	no fix	2018-01-14	2 versions
CVE-2023-34128US	critical9.8	0.71% (53rd)	—	9.3.2	2023-07-13	2 versions
CVE-2023-34130US	critical9.8OT elevated	0.31% (24th)	—	9.3.2	2023-07-13	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-305Authentication Bypass by Primary Weakness2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan