Vulnerabilities in Sangfor
19 resultsCVE-2023-30806CRITICALSangfor Next-Gen Application Firewall PHPSESSID Command InjectionEPSS 65.0%CVE-2023-30805CRITICALSangfor Next-Gen Application Firewall Login Un Param Command InjectionEPSS 65.0%CVE-2023-30804MEDIUMSangfor Next-Gen Application Firewall Authenticated File DisclosureEPSS 38.9%CVE-2023-30803CRITICALSangfor Next-Gen Application Firewall Authentication BypassEPSS 20.9%CVE-2026-1324HIGHSangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injectionEPSS 7.0%CVE-2025-15501CRITICALSangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injectionEPSS 6.9%CVE-2025-15500CRITICALSangfor Operation and Maintenance Management System HTTP POST Request getHis os command injectionEPSS 6.1%CVE-2025-15502MEDIUMSangfor Operation and Maintenance Management System session SessionController os command injectionEPSS 6.1%CVE-2025-15499HIGHSangfor Operation and Maintenance Management System VersionController.java uploadCN os command injectionEPSS 5.7%CVE-2025-12916MEDIUMSangfor Operation and Maintenance Security Management System Frontend portal_login command injectionEPSS 5.1%CVE-2026-1414MEDIUMSangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injectionEPSS 4.8%CVE-2026-1412MEDIUMSangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injectionEPSS 4.3%CVE-2026-1413MEDIUMSangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injectionEPSS 3.0%CVE-2026-18641MEDIUMSangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injectionEPSS 2.7%CVE-2025-15503MEDIUMSangfor Operation and Maintenance Management System common.jsp unrestricted uploadEPSS 2.0%CVE-2023-30802MEDIUMSangfor Next-Gen Application Firewall Source Code DisclosureEPSS 0.8%CVE-2026-1325MEDIUMSangfor Operation and Maintenance Security Management System edit_pwd_mall password recoveryEPSS 0.6%CVE-2025-5129HIGHSangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search pathEPSS 0.3%CVE-2025-52923MEDIUMSangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.EPSS 0.2%