Product by SonicWall
SonicWall Email Security
17 known vulnerabilities in SonicWall Email Security (SonicWall), 5 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
5
Actively exploited (KEV)
5
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 74 other products | 10.0 | |
| Critical | CVE-2021-20021 | SonicWall Email Security Improper Privilege Management Vulnerability In CISA KEVRansomwarealso in 10 other products | 9.8 | |
| Critical | CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability In CISA KEVRansomwarealso in 22 other products | 9.0 | |
| Critical | CVE-2021-20022 | SonicWall Email Security Unrestricted Upload of File Vulnerability In CISA KEVRansomwarealso in 10 other products | 7.2 | |
| Critical | CVE-2021-20023 | SonicWall Email Security Path Traversal Vulnerability In CISA KEVRansomwarealso in 10 other products | 4.9 | |
| High | CVE-2021-3450 | CA certificate check bypass with X509_V_FLAG_X509_STRICT | 7.4 | |
| Medium | CVE-2021-45105 | Apache Log4j2 does not always protect from infinite recursion in lookup evaluation | 5.9 | |
| Medium | CVE-2018-3639 | Intel Multiple: security vulnerability | 5.5 | |
| High | CVE-2026-66150 | SonicWall Email Security: Code Injection | 7.8 | |
| High | CVE-2026-66149 | SonicWall Email Security: Code Injection | 7.8 | |
| Critical | CVE-2025-40604 | SonicWall Email Security: Download of Code Without Integrity Check | 9.8 | |
| Medium | CVE-2024-22398 | SonicWall Email Security: Path Traversal | 4.9 | |
| Medium | CVE-2023-0655 | SonicWall Email Security: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Medium | CVE-2025-40605 | SonicWall Email Security: Relative Path Traversal | 5.3 | |
| Medium | CVE-2026-3468 | SonicWall Email Security: Cross-site Scripting | 4.8 | |
| Low | CVE-2026-3470 | SonicWall Email Security: Improper Input Validation | 3.8 | |
| Low | CVE-2026-3469 | SonicWall Email Security: Improper Input Validation | 2.7 |
News
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
- SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert