Sangfor Next-gen Application Firewall — known CVE vulnerabilities

Every CVE whose affected-product data names Sangfor Next-gen Application Firewall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-30803 — CVSS 9.8 (critical): The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and…
• CVE-2023-30805 — CVSS 9.8 (critical): The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote…
• CVE-2023-30806 — CVSS 9.8 (critical): The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote…
• CVE-2023-30802 — CVSS 5.3 (medium): The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and…
• CVE-2023-30804 — CVSS 4.9 (medium): The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and…