6.5Mittel
Stored XSS in the VPN logs monitor
Stormshield Stormshield Network Security
A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.
Stormshield Schwachstellen (CVE)
Für Stormshield veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
7.0Hoch
Stored XSS on SNS Enrollment Portal
Stormshield Stormshield Network Security
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting certificate creation for user. The stored XSS can only be triggered during validation by the administrator.
7.1Hoch
Stored XSS on SNS Enrollment Portal
Stormshield Stormshield Network Security
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.
7.5Hoch
Improper Signature Verification of Active Update Files
Stormshield Stormshield Network Security
A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
6.6Mittel
Possible DOM XSS in SNS Web Administration Portal
Stormshield Stormshield Network Security
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lur…
7.8Hoch
Improper Signature Verification of Firmware Update Files
Stormshield Stormshield Network Security
A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS.
4.3Mittel
Possible XSS in the SNS web administration panel
Stormshield Stormshield Network Security
It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration interface.
4.3Mittel
Information leak in NSRPC client history
Stormshield Stormshield Network Security
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command …
4.3Mittel
Connection possible to the Administration portal with a revoked certificate
Stormshield Stormshield Network Security
A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included) A revoked client certificate can still be used to authenticate to the captive‑admin portal, allowing an at…
5.3Mittel
Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.
StormShield StormShield Network Security
A vulnerability was discovered on Stormshield Network Security * 4.3.0 to 4.3.41, * 4.8.0 to 4.8.15, * 5.0.0 to 5.0.5 It is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executin…
7.5Hoch
stormshield stormshield network security
An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing.