Email Security Virtual Appliance vulnerabilities

3 known vulnerabilities in Email Security Virtual Appliance from SonicWall. 2 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 4.9 Medium severity

  SonicWall Email Security Path Traversal Exploited

  CVE-2021-20023Apr 20, 2021SonicWallEPSS 51.7%

  SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.

• 7.2 High severity

  SonicWall Email Security Unrestricted Upload of File Exploited

  CVE-2021-20022Apr 9, 2021SonicWallEPSS 16.6%

  SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.

• 9.8 Critical severity

  SonicWall Email Security Improper Privilege Management Exploited

  CVE-2021-20021Apr 9, 2021SonicWallEPSS 88.8%

  A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.