NVD disclosure day

Published threat advisories for April 9, 2021

CVE advisoryKnown Exploit

CVE-2021-20022

SonicWall Email Security Arbitrary File Upload Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An authenticated attacker can upload arbitrary files to SonicWall Email Security systems, potentially leading to unauthorized access or data modification. This poses a risk to email infrastructure and data confidentiality. Organizations should identify affected assets and apply vendor fixes.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2021-20021

SonicWall Email Security Account Creation Risk.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

SonicWall Email Security software is vulnerable to an issue that allows unauthorized administrative account creation via a crafted HTTP request. This could lead to compromised system security and data integrity for affected organizations. The business risk is significant due to the potential for unauthorized access and

NVD published: • CISA KEV