ES
Product
Email Security
On CISA KEVExploited in the wildRansomware-linked
15
CVEs
5
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 5Low 2
Watch
Add Email Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20023 RansomwareIn wildKEV | 4.9 | Apr 20 | SonicWall Email Security Path Traversal Vulnerability Affected: 10.0.9 and earlier |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: through 10.0.12 |
| CVE-2025-40605 | 5.3 | Nov 20 | A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal… Affected: 10.0.33.8195 and earlier versions |
| CVE-2023-0655 | 5.3 | Feb 14 | SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email… Affected: through 10.0.19.7431 |
| CVE-2026-3468 | 4.8 | Mar 31 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web… Affected: 10.0.34.8215 and earlier versions; 10.0.34.8223 and earlier versions |
Showing 5