CVE-2019-7489

9.8 criticalEPSS 5.3%

A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 5.3% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2019-12-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:email_security_appliance

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0023
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0023

Check your stack JSON