What’s Vulnerable › Vulnerabilities
CVE-2018-5691
- Severity: medium (CVSS 5.4 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-01-14 · updated 2026-06-17
- Weakness: CWE-79
Description
SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.
Affected products
- SonicWall Analyzer: from 7.0 through 7.2; from 8.1 through 8.4
- SonicWall Global Management System (GMS): from 7.0 through 7.2; from 8.1 through 8.4
References
- http://documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues?ParentProduct=867
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003
- https://www.vulnerability-lab.com/get_content.php?id=1819
- http://documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues?ParentProduct=867
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003
- https://www.vulnerability-lab.com/get_content.php?id=1819
Get alerted when CVE-2018-5691 or the next vulnerability affects your stack