CVE-2018-5691

MEDIUM

SonicWall Analyzer 7.0-7.2 and Global Management System 7.0-7.2 - Cross-Site Scripting via TreeControl Module

Title source: llm

SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.

Core 3

Core References

Exploit, Third Party Advisory x_refsource_misc

Broken Link x_refsource_misc

Vendor Advisory x_refsource_confirm

CVSS v3 5.4

EPSS 0.0036

EPSS Percentile 58.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (2)

sonicwall/analyzer 7.0 - 7.2

sonicwall/global_management_system 7.0 - 7.2

Published Jan 14, 2018

Tracked Since Feb 18, 2026