CVE-2022-22280: SonicWall Analytics

Critical severity, CVSS 9.8. EPSS: 9.5% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions.

Affected products

• SonicWall Analytics: up to and including 2.5.0.3-2520
• SonicWall Global Management System: before 9.3.1 (fixed in 9.3.1); version 9.3.1 only

Published 2022-07-29. Last modified 2026-06-17.