Smoothwall Smoothwall Express
19 CVEs affecting Smoothwall Smoothwall Express. Latest disclosed: 2026-02-16. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2011-1085 | High | 8.8 | 2020-02-07 | CSRF vulnerability in Smoothwall Express 3. |
CVE-2019-25395 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attacker… |
CVE-2019-25394 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that allow attackers to i… |
CVE-2019-25379 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow att… |
CVE-2019-25393 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25392 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25389 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25388 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25387 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25386 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attacker… |
CVE-2019-25385 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by ma… |
CVE-2019-25384 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers… |
CVE-2019-25383 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the apcupsd.cgi script that allow attackers… |
CVE-2019-25382 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25381 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers t… |
CVE-2019-25380 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dhcp.cgi script that allow attackers to… |
CVE-2019-25378 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilities in the proxy.cgi endpoint that allow attackers to inject… |
CVE-2011-1084 | Medium | 6.1 | 2020-02-07 | A cross-site scripting (XSS) vulnerability in Smoothwall Express 3. |
CVE-2019-25390 | Medium | 5.4 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the interfaces.cgi script that allow attack… |