CVE-2014-5024: Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA befo...

Security readout for executives and security teams

This is a cross-site scripting flaw in older Dell SonicWALL GMS, Analyzer, and UMA web management interfaces. A remote attacker could inject script or HTML through the node_id parameter in sgms/panelManager. Business impact depends on whether vulnerable management portals are still deployed and reachable. Exposure is most likely in legacy Dell SonicWALL GMS, Analyzer, or UMA deployments before 7.2 SP1, especially where administrative web interfaces are reachable by users or networks beyond a tightly controlled management zone. Treat as a legacy management-plane risk. It is not KEV-listed in the supplied data, but exposed security management consoles can amplify impact if administrators are targeted. Prioritize inventory and upgrade if these products remain in use. Mitigation focus: Upgrade affected Dell SonicWALL GMS, Analyzer, and UMA systems to 7.2 SP1 or later.; Check current Dell/SonicWall guidance for any additional remediation notes.; Restrict management interface access to trusted administrative networks..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.