Latest sonicwall email security Vulnerabilities

● CVE-2023-0655

SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email addresses.

SonicWall Email Security<=10.0.19.7431

● CVE-2022-2324

Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance. This vulnerability impacts 10.0.17.7319 and...

SonicWall Email Security<=10.0.17.7319

● CVE-2021-45105

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el8

debian/apache-log4j2

debian/apache-log4j2<=2.16.0-1~deb10u1<=2.16.0-1<=2.16.0-1~deb11u1

and 217 more

● CVE-2021-45046

Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

debian/apache-log4j2

debian/apache-log4j2<=2.15.0-1<=2.15.0-1~deb10u1<=2.15.0-1~deb11u1

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

maven/org.apache.logging.log4j:log4j-core<2.12.2

maven/org.apache.logging.log4j:log4j-core>=2.13.0<2.16.0

and 110 more

● CVE-2021-44228

Apache Log4j2 Remote Code Execution Vulnerability

debian/apache-log4j1.2

debian/apache-log4j2

debian/apache-log4j2<=2.13.3-1<=2.7-2<=2.11.1-2

Apple Xcode<13.3

Apache Log4j2

redhat/log4j<2.15.0

and 429 more

● CVE-2021-20023

SonicWall Email Security Path Traversal Vulnerability

Sonicwall Email Security<10.0.9.6173

Sonicwall Hosted Email Security<10.0.9.6173

● CVE-2021-20022

SonicWall Email Security Unrestricted Upload of File Vulnerability

SonicWall Email Security<10.0.9.6103

Sonicwall Hosted Email Security<10.0.9.6103

● CVE-2021-20021

SonicWall Email Security Improper Privilege Management Vulnerability

SonicWall SonicWall Email Security

SonicWall Email Security<10.0.9.6103

Sonicwall Hosted Email Security<10.0.9.6103

● CVE-2021-3450

OpenSSL could allow a remote attacker to bypass security restrictions, caused by a missing check in the validation logic of X.509 certificate chains by the X509_V_FLAG_X509_STRICT flag. By using any v...

rust/openssl-src>=111.11.0<111.15.0

IBM Security Verify Access<=10.0.0

OpenSSL OpenSSL>=1.1.1h<1.1.1k

FreeBSD FreeBSD=12.2

FreeBSD FreeBSD=12.2-p1

FreeBSD FreeBSD=12.2-p2

and 52 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.