Vulnerabilities > Sonicwall > Email Security > High

DATE CVE VULNERABILITY TITLE RISK
2022-07-29 CVE-2022-2324 Authentication Bypass by Spoofing vulnerability in Sonicwall Email Security 10.0.9
Improperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads to bypass of Capture ATP security service in the appliance.
network
low complexity
sonicwall CWE-290
7.5
2021-04-09 CVE-2021-20022 Unrestricted Upload of File with Dangerous Type vulnerability in Sonicwall Email Security and Hosted Email Security
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.
network
low complexity
sonicwall CWE-434
7.2
2021-03-25 CVE-2021-3450 Improper Certificate Validation vulnerability in multiple products
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.
7.4