GM
Product
GMS
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 9Medium 6Low 0
Watch
Add GMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-34137 | 9.8 | Jul 13 | SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability Affected: 9.3.2-SP1 and earlier versions |
| CVE-2023-34136 | 9.8 | Jul 13 | Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker Affected: 9.3.2-SP1 and earlier versions |
| CVE-2023-34132 | 9.8 | Jul 13 | Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks Affected: 9.3.2-SP1 and earlier versions |
| CVE-2023-34130 | 9.8 | Jul 13 | SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data Affected: 9.3.2-SP1 and earlier versions |
| CVE-2023-34128 | 9.8 | Jul 13 | Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file Affected: 9.3.2-SP1 and earlier versions |
| CVE-2023-34124 | 9.8 | Jul 13 | The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass Affected: 9.3.2-SP1 and earlier versions |
| CVE-2026-66147 | 9.4 | Aug 11 | An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote… Affected: 9.5.1 and earlier versions |
| CVE-2026-66145 | 9.1 | Aug 11 | An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and… Affected: 9.5.1 and earlier versions |
Showing 8