SN
Product
Stormshield Network Security
45
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 4High 21Medium 20Low 0
Watch
Add Stormshield Network Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-113465 | 6.6 | Oct 20 | Possible DOM XSS in SNS Web Administration Portal Affected: 5.0.0 through 5.0.9; 5.1.0 through 5.1.3 |
| CVE-2026-111088 | 6.5 | Oct 20 | Stored XSS in the VPN logs monitor Affected: 4.3.0 through 4.3.44; 4.8.0 through 4.8.19; 5.0.0 through 5.0.9; 5.1.0 through 5.1.3 |
| CVE-2023-47093 | 6.5 | Dec 20 | An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through 4.6.8, and 4.7.0 Affected: 4.0.0 before 4.3.22; 4.4.0 before 4.6.9; 4.7.0 |
| CVE-2021-37613 | 6.5 | Feb 10 | Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service Affected: 1.0.0 through 1.6.1; 2.0.0 through 2.7.8; 2.8.0 through 2.16.0; 3.0.0 through 3.7.24; after 3.8.0 through 3.11.12; after 4.0.0 through 4.2.7 |
| CVE-2021-31814 | 6.1 | Feb 10 | In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client Affected: 2.1.0 through 2.9.0; 1.1.0 |
| CVE-2020-8430 | 6.1 | Apr 13 | Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal Affected: 3.0.0 through 3.7.10; 3.8.0 through 3.10.0; 4.0.0 through 4.0.1 |
| CVE-2022-4304 | 5.9 | Feb 8 | Timing Oracle in RSA Decryption Affected: 2.7.0 before 2.7.11; 2.8.0 before 3.7.34; 3.8.0 before 3.11.22; 4.0.0 before 4.3.16; 4.4.0 before 4.6.3 |
| CVE-2021-3398 | 5.8 | Feb 10 | Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component Affected: 3.0.0 through 3.7.24; 3.8.0 through 3.11.12 |
| CVE-2021-27506 | 5.5 | Mar 19 | The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files Affected: 1.0 through 4.2.0 |
| CVE-2026-8474 | 5.3 | Jun 1 | Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances. Affected: 4.3.0 through 4.3.41; 4.8.0 through 4.8.15; 5.0.0 through 5.0.5 |
| CVE-2023-41166 | 5.3 | Dec 20 | An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1 Affected: 3.7.0 through 3.7.39; 3.11.0 through 3.11.27; 4.3.0 before 4.3.23; 4.6.0 before 4.6.10; 4.7.0 before 4.7.2 |
| CVE-2023-20052 | 5.3 | Mar 1 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier,… Affected: 3.0.0 before 3.7.35; 3.8.0 before 3.11.23; 4.3.0 before 4.3.17; 4.4.0 before 4.6.4 |
| CVE-2021-28096 | 5.3 | Jan 27 | An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used) Affected: 2.0.0 through 2.7.8; 3.7.6 through 3.7.20; 3.8.0 through 3.11.8; 4.0.1 before 4.2.3 |
| CVE-2021-3384 | 5.3 | Mar 2 | A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to… Affected: 2.0.0 before 2.7.8; 2.8.0 through 2.16.0; 3.0.0 through 3.7.17; 3.8.0 through 3.11.5; 4.0.0 before 4.1.5 |
| CVE-2023-41165 | 4.8 | Dec 25 | An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39, 3.10.0 through 3.11.26 before 3.11.27, 4.0 through 4.3.21 before 4.3.22, and… Affected: 3.7.0 before 3.7.39; 3.10.0 before 3.11.27; 4.0.0 before 4.3.22; 4.4.0 before 4.6.9 |
| CVE-2020-11711 | 4.8 | Aug 25 | An issue was discovered in Stormshield SNS 3.8.0 Affected: 3.6.0 before 3.7.13; 3.8.0 before 3.11.0; 4.0.0 before 4.1.1 |
| CVE-2026-14466 | 4.3 | Sep 4 | Possible XSS in the SNS web administration panel Affected: 4.8.0 through 4.8.16; 5.0.0 through 5.0.6 |
| CVE-2026-8482 | 4.3 | Jul 2 | Information leak in NSRPC client history Affected: 4.3.0 through 4.3.41; 4.8.0 through 4.8.15; 5.0.0 through 5.0.5 |
| CVE-2026-8480 | 4.3 | Jul 1 | Connection possible to the Administration portal with a revoked certificate Affected: 4.3.0 through 4.3.41; 4.4.0 through 4.8.15; 5.0.2 EA through 5.0.5 |
| CVE-2024-37386 | 4.2 | Jul 15 | An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0 Affected: 4.0.0 through 4.3.25; 4.4.0 through 4.7.5; 4.8.0 |
Showing 20