CVE-2024-22397

CVE-2024-22397

Vendor Sonicwall
Product SonicOS
Weakness CWE-79 · XSS
Published March 14, 2024
Last update March 27, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code.

Key dates

02Disclosure timeline

March 14, 2024 CVE published
March 27, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-2101 Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting CVE-2022-2628 DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting CVE-2024-1720 User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting CVE-2026-2924 Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'imageLoad' CVE-2025-2745 AVEVA PI Web API Cross-site Scripting