Analyzer
Vendor:
First CVE: Dec 9, 2013 · Active for 12 years
10
Total CVEs
More Total CVEs than 88% of tracked products
1.7
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Analyzer over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 9, 2013
12 years ago
Most Recent CVE
Feb 11, 2020
2,355 days ago
CVE Severity & Scoring
Analyzer10 CVEs
10%
30%
20%
40%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network5 (50.0%)
Unknown5 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (50.0%)
High0 (0.0%)
Unknown5 (50.0%)
User Interaction
None4 (40.0%)
Unknown5 (50.0%)
Required1 (10.0%)
Privileges Required
Low2 (20.0%)
High0 (0.0%)
None3 (30.0%)
Unknown5 (50.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-1359CRITICAL An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, | Feb 11, 2020 | 9.8 | 89 | NO | YES |
CVE-2013-1360CRITICAL An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, | Feb 11, 2020 | 9.8 | 52 | NO | YES |
CVE-2014-8420HIGH The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote aut | Nov 25, 2014 | 9.0 | 50 | NO | YES |
CVE-2016-2397CRITICAL The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Jav | Feb 17, 2016 | 9.8 | 32 | NO | NO |
CVE-2016-2396CRITICAL The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitr | Feb 17, 2016 | 9.9 | 32 | NO | NO |
Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM | Dec 9, 2013 | 3.5 | 24 | NO | YES |
CVE-2015-3990HIGH The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors | May 20, 2015 | 9.0 | 23 | NO | NO |
CVE-2018-5691MEDIUM SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module. | Jan 14, 2018 | 5.4 | 19 | NO | NO |
CVE-2014-5024MEDIUM Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML | Jul 24, 2014 | 4.3 | 18 | NO | NO |
CVE-2014-0332MEDIUM Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow rem | Feb 14, 2014 | 4.3 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
2 CVEs
20.0% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
30.0% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Analyzer
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.1 | 2 | 9.8 | 5.6% | 0 | 0 |
| 8.0 | 2 | 9.8 | 5.6% | 0 | 0 |
| 7.2 | 3 | 9.6 | 11.7% | 0 | 1 |
| 7.1 | 2 | 3.9 | 3.5% | 0 | 1 |
| 7.0 | 4 | 6.8 | 29.9% | 0 | 3 |