Sonicwall Web Application Firewall vulnerabilities
2 vulnerabilities
Known vulnerabilities in Sonicwall Web Application Firewall, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2021-45105apache software foundation · apache log4j2 +125 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationApache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.CVSS5.9MediumEPSS100.00%RoutineCVE-2018-3639intel corporation · multiple +558 moreintel corporation multipleSystems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.CVSS5.5MediumEPSS60.42%