← Database

CVE-2022-22280

CRITICAL CVSS: 9.8 Published: 2022-07-29 Modified: 2026-06-17

Description

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions.

Affected Platforms

Sonicwall Global Management SystemSonicwall Analytics

Weakness Type

CWE-89, CWE-89

References