A stored cross-site scripting (XSS) vulnerability exists in the SonicOS...

6.1 CVSS

Vulnerability Description

A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-5142

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0017

More from SonicWall

View All →

CVE-2025-40605

A Path Traversal vulnerability has been identified in the Email...

Unknown 0

CVE-2025-40604

Download of Code Without Integrity Check Vulnerability in the SonicWall...

Unknown 0

CVE-2025-40603

A potential exposure of sensitive information in log files in...

Unknown 0

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in...

Unknown 0

CVE-2025-40601

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service...

Unknown 0

Affected Vendor

SonicWall

View all reports →

Affected Software

SonicOS

Vulnerable Versions:

SonicOS 6.5.4.7-79n and earlier, SonicOS 5.9.1.7-2n and earlier, SonicOS 5.9.1.13-5n and earlier, SonicOS 6.5.1.11-4n and earlier, SonicOS 6.0.5.3-93o and earlier, SonicOSv 6.5.4.4-44v-21-794 and earlier, SonicOS 7.0.0.0-1