Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2016-2397	Modificada	Crítica (9.8)	6.4%	—	Sonicwall UMA Em5000 Firmware Sonicwall Analyzer Sonicwall Global Management System	17/2/2016	17/6/2026	The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.
CVE-2016-2396	Modificada	Crítica (9.9)	4.7%	—	Sonicwall Analyzer Sonicwall Global Management System Sonicwall UMA Em5000 Firmware	17/2/2016	17/6/2026	The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via vectors related to configuration input.
CVE-2015-3990	Modificada	Alta (9)	2.7%	—	Sonicwall UMA Em5000 Firmware Sonicwall Analyzer Sonicwall Global Management System	20/5/2015	17/6/2026	The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.
CVE-2014-8420	Modificada	Alta (9)	24%	—	Sonicwall Analyzer Sonicwall Global Management System Sonicwall UMA Em5000	25/11/2014	17/6/2026	The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVE-2014-5024	Modificada	Media (4.3)	1.6%	—	Sonicwall Analyzer Sonicwall Global Management System Sonicwall UMA Em5000	24/7/2014	17/6/2026	Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id parameter.