Dimension (Watchguard) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-08. Vendor: Watchguard.
CVEs of Dimension
- CVE-2026-86135 - CVSS 7 (high), 2026-09-08: A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger…
- CVE-2026-78613 - CVSS 8.6 (high), 2026-08-27: WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report…
- CVE-2026-78616 - CVSS 4.8 (medium), 2026-08-27: A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to…
- CVE-2026-78612 - CVSS 8.6 (high), 2026-08-27: WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report…
- CVE-2026-78615 - CVSS 4.6 (medium), 2026-08-27: A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a…
- CVE-2026-78103 - CVSS 5.1 (medium), 2026-08-27: WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this…
- CVE-2026-78498 - CVSS 5.1 (medium), 2026-08-27: A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to…
- CVE-2026-78610 - CVSS 8.4 (high), 2026-08-27: WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global…
- CVE-2026-78617 - CVSS 6.3 (medium), 2026-08-27: WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowing a remote attacker to perform…
- CVE-2026-78047 - CVSS 5.1 (medium), 2026-08-27: A stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to…
- CVE-2026-78495 - CVSS 5.3 (medium), 2026-08-27: A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged…
- CVE-2026-13108 - CVSS 8.7 (high), 2026-08-27: WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service.
- CVE-2026-78174 - CVSS 9.3 (critical), 2026-08-27: WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can…
- CVE-2026-78499 - CVSS 5.1 (medium), 2026-08-27: A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenticated privileged attacker to enumerate…
- CVE-2026-78618 - CVSS 6.9 (medium), 2026-08-27: A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by…
- CVE-2026-78614 - CVSS 8.6 (high), 2026-08-27: WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report…
- CVE-2026-78500 - CVSS 5.1 (medium), 2026-08-27: A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker…
