Smoothwall Smoothwall Express — known CVE vulnerabilities

Every CVE whose affected-product data names Smoothwall Smoothwall Express, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (21)

CVE-2011-1085 — CVSS 8.8 (high): CSRF vulnerability in Smoothwall Express 3.
CVE-2019-25395 — CVSS 7.2 (high): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script…
CVE-2019-25379 — CVSS 7.2 (high): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi…
CVE-2019-25394 — CVSS 7.2 (high): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that…
CVE-2019-25382 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated…
CVE-2019-25383 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the apcupsd.cgi script…
CVE-2019-25384 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script…
CVE-2019-25385 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows attackers to inject…
CVE-2019-25386 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script…
CVE-2019-25387 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated…
CVE-2019-25388 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated…
CVE-2019-25389 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated…
CVE-2019-25392 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated…
CVE-2019-25393 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated…
CVE-2011-1084 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in Smoothwall Express 3.
CVE-2019-25378 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilities in the proxy.cgi endpoint that allow…
CVE-2019-25380 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dhcp.cgi script…
CVE-2019-25381 — CVSS 6.1 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script…
CVE-2019-25390 — CVSS 5.4 (medium): Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the interfaces.cgi…
CVE-2026-26352 — CVSS 5.4 (medium): Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script…
CVE-2026-27508 — CVSS 5.4 (medium): Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due…