VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 29, 2022· Updated Jun 17, 2026

CVE-2022-22280

CVE-2022-22280

Description

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions.

Affected products

7
  • SonicWall/Analytics
    cpe:2.3:a:sonicwall:analytics:*:*:*:*:on-prem:*:*:*
    Range: <=2.5.0.3-2520
  • SonicWall/Global Management System2 versions
    cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sonicwall:global_management_system:*:*:*:*:*:*:*:*range: <9.3.1
    • cpe:2.3:a:sonicwall:global_management_system:9.3.1:-:*:*:*:*:*:*
  • SonicWall/Analytics On-Premllm-fuzzy2 versions
    <=2.5.0.3-2520+ 1 more
    • (no CPE)range: <=2.5.0.3-2520
    • (no CPE)range: 2.5.0.3-2520 and earlier
  • SonicWall/GMSllm-fuzzy
    Range: <=9.3.1-SP2-Hotfix1
  • SonicWall/SonicWall GMSv5
    Range: 9.3.1-SP2-Hotfix1 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.