SonicWall · weakness class

SQL Injection

13 CVEs · 3 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Connect AI

exploited in the wild: 3
check available: 1
likely to be exploited: 3

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

SonicWall SRA 4600 VPN - SQL InjectionCVE-2019-7481SonicWall · CVSS 7.5 · 100% likely
CWE-89
A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session re…CVE-2021-20016SonicWall · CVSS 9.8 · 40% likely
CWE-89
Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running…CVE-2021-20028SonicWall · CVSS 9.8 · 30% likely
CWE-89
SonicWall GMS and Analytics - SQL InjectionCVE-2023-34133SonicWall · CVSS 7.5 · 73% likely
CWE-89
Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) selectedUserGroup parame…CVE-2014-4977Sonicwall · 75% likely
CWE-89
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2 allows remote authenticated users to execute arbitrary SQL…CVE-2012-2962Sonicwall · 67% likely
CWE-89
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the (1) scrutinizer and (2) scrutremote acco…CVE-2012-3951Sonicwall · 52% likely
CWE-89
Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-…CVE-2022-22280SonicWall · 9.8% likely
CWE-89
A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1.CVE-2019-7478SonicWall · 1.1% likely
CWE-89
SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter.CVE-2011-5262Sonicwall · 1.1% likely
CWE-89
Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 versi…CVE-2019-7484SonicWall · 0.8% likely
CWE-89
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only a…CVE-2026-4112SonicWall · CVSS 7.2 · 0.6% likelycovered by CyberSIXT
CWE-89
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 a…CVE-2026-109594SonicWall · CVSS 6.8 · 0.4% likelycovered by CyberSIXT
CWE-89 4 articles

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.