Smoothwall
Smoothwall Express: vulnerabilidades y CVE
Smoothwall Express tiene 21 vulnerabilidades publicadas, 19 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE21
Últimos 12 meses19
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-27508 | Media (5.1) | 0.27% | — | 30 mar 2026 | Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameter. Attackers can craft malicious URLs… |
| CVE-2026-26352 | Media (5.1) | 0.24% | — | 30 mar 2026 | Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP parameter. Authenticated attackers can… |
| CVE-2019-25395 | Media (5.3) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attackers to inject malicious scripts through the HOSTNAME, KEYMAP,… |
| CVE-2019-25394 | Media (5.3) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that allow attackers to inject malicious scripts through POST parameters. Attackers… |
| CVE-2019-25393 | Media (5.1) | 0.24% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validation.… |
| CVE-2019-25392 | Media (5.1) | 0.25% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the IP parameter. Attackers can… |
| CVE-2019-25390 | Media (4.8) | 0.21% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the interfaces.cgi script that allow attackers to inject malicious scripts through multiple parameters… |
| CVE-2019-25389 | Media (5.1) | 0.25% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the MACHINES parameter. Attackers… |
| CVE-2019-25388 | Media (5.1) | 0.25% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the ipblock.cgi… |
| CVE-2019-25387 | Media (5.1) | 0.25% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the xtaccess.cgi… |
| CVE-2019-25386 | Media (5.1) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attackers to inject malicious scripts through unvalidated… |
| CVE-2019-25385 | Media (5.1) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the MACHINE and MACHINECOMMENT parameters.… |
| CVE-2019-25384 | Media (5.1) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers to inject malicious scripts through unvalidated parameters.… |
| CVE-2019-25383 | Media (5.1) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the apcupsd.cgi script that allow attackers to inject malicious scripts through multiple POST… |
| CVE-2019-25382 | Media (5.1) | 0.26% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the NTP_SERVER parameter.… |
| CVE-2019-25381 | Media (5.1) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious scripts through unvalidated parameters.… |
| CVE-2019-25380 | Media (5.1) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dhcp.cgi script that allow attackers to inject malicious scripts through multiple parameters.… |
| CVE-2019-25379 | Media (5.3) | 0.26% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit… |
| CVE-2019-25378 | Media (5.1) | 0.23% | — | 16 feb 2026 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilities in the proxy.cgi endpoint that allow attackers to inject malicious scripts through parameters including CACHE_SIZE,… |
| CVE-2011-1085 | Alta (8.8) | 0.46% | — | 7 feb 2020 | CSRF vulnerability in Smoothwall Express 3. |
| CVE-2011-1084 | Media (6.1) | 0.65% | — | 7 feb 2020 | A cross-site scripting (XSS) vulnerability in Smoothwall Express 3. |