SonicWall Email Security Appliance vulnerabilities

3 CVEs affecting SonicWall Email Security Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-7489, published 2019-12-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-7489, published 2019-12-23. Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days. A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier.
CVE-2014-2879, published 2014-04-17. Medium severity, CVSS 4.3. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the…
CVE-2019-7488, published 2019-12-23. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version…