CVSS: 9.8EPSS: 63%CPEs: 3EXPL: 0CVE-2021-20023 – SonicWall Email Security Path Traversal Vulnerability
https://notcve.org/view.php?id=CVE-2021-20023
20 Apr 2021 — SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. SonicWall Email Security versión 10.0.9.x, contiene una vulnerabilidad que permite a un atacante autenticado posteriormente leer un archivo arbitrario en el host remoto SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWa... • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.8EPSS: 31%CPEs: 2EXPL: 0CVE-2021-20022 – SonicWall Email Security Unrestricted Upload of File Vulnerability
https://notcve.org/view.php?id=CVE-2021-20022
09 Apr 2021 — SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. SonicWall Email Security versión 10.0.9.x, contiene una vulnerabilidad que permite a un atacante autenticado posteriormente cargar un archivo arbitrario en el host remoto SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated attacker to upload a file to the remote host. This v... • https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 9.8EPSS: 80%CPEs: 2EXPL: 1CVE-2021-20021 – SonicWall Email Security Improper Privilege Management Vulnerability
https://notcve.org/view.php?id=CVE-2021-20021
09 Apr 2021 — A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Una vulnerabilidad en SonicWall Email Security versión 10.0.9.x, permite a un atacante crear una cuenta administrativa mediante el envío de una petición HTTP diseñada en el host remoto SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a... • https://github.com/SUPRAAA-1337/CVE-2021-20021 • CWE-269: Improper Privilege Management •