CVE-2014-0332: Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyz...

Security readout for executives and security teams

This is a 2014 cross-site scripting issue in Dell SonicWALL management products. An attacker might inject script or HTML through a specific web parameter, potentially affecting administrators using vulnerable consoles. The source bundle names fixed versions but does not provide CVSS, exploitation evidence, or detailed preconditions. Exposure is most likely in legacy SonicWALL GMS, Analyzer, or UMA E5000 deployments older than 7.1 SP2, particularly if administrative web interfaces are reachable from untrusted networks or used by privileged administrators. Treat this as a legacy management-plane cleanup item. It is not KEV-listed in the bundle, but vulnerable administrative consoles can create privileged-browser risk and should be upgraded or isolated. Mitigation focus: Upgrade affected GMS, Analyzer, and UMA E5000 systems to 7.1 SP2 or a vendor-supported later release.; Review SonicWall’s bulletin for product-specific remediation guidance and supported upgrade paths.; Restrict administrative web access to trusted networks and authorized administrators..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.