CVE Tools
Track your stack

Stormshield

43 CVEs tracked since 2020. Since Oct 2020, none of them reached CISA KEV.

Stormshield CVEs per month

Oct 2020 to Dec 2023. Point at a month, or focus the strip and use the arrow keys.
Stormshield CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-1020
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-0780
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-1240
2022-0140
2022-0230
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-0730
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-0280
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-0850
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-1260

Products

The products that kept showing up in Stormshield's monthly top three, with their CVEs summed over those months.

  1. Stormshield Network Security227 months
  2. Endpoint Security102 months
  3. Stormshield Management Center72 months
  4. SSL VPN Client31 month
  5. Network Security22 months
  6. Sslvpn11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Stormshield.

  1. CVE-2026-14466Possible XSS in the SNS web administration panel4.3
  2. CVE-2026-8482Information leak in NSRPC client history4.3
  3. CVE-2026-8480Connection possible to the Administration portal with a revoked certificate4.3
  4. CVE-2026-8474Possible to run a Cross Site Scripting request on the login API available on Stormshield SNS appliances.5.3
  5. CVE-2025-48707An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing.7.5
  6. CVE-2023-28616An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1. It affects user accounts for which the password has an equals ...7.5
  7. CVE-2023-41165An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39, 3.10.0 through 3.11.26 before 3.11.27, 4.0 through 4.3.21 before 4.3.22, and 4.4.0 through 4.6.8 be...4.8
  8. CVE-2023-47091An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker c...7.5
  9. CVE-2023-34198In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 through 4.3.18 before 4.3.19, 4.4.0 through 4.6.5 before 4.6.6, and 4.7.0 befor...7.3
  10. CVE-2023-41166An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1. It's possible to know...5.3
  11. CVE-2023-47093An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through 4.6.8, and 4.7.0. Sending a crafted ICMP packet may lead to a crash of the ASQ engine.6.5
  12. CVE-2023-26095ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet.7.5
  13. CVE-2022-46783An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book.5.3
  14. CVE-2021-27932Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions.7.8
  15. CVE-2020-11711An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin pan...4.8

The record

Peak rank
#55 in Jul 2021
Busiest month shown
Jul 2021, 8 CVEs
Months with a KEV entry
0 since Oct 2020
Monthly snapshots
9 since 2020
Stormshield's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store