Read the docs

Sophos

Records175All Threatist records
Exploited (KEV)7In CISA KEV
CVSS critical27CVSS 9.0–10.0
CVSS high69CVSS 7.0–8.9

Exploited now

Sophos records in CISA KEV
TI-2020-11847 Sophos XG Firewall Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2025-02-06TI-2020-17763 CyberoamOS (CROS) SQL Injection Vulnerability Priority CRITICAL 100KEV 2025-02-06TI-2023-01568 Sophos Web Appliance Command Injection Vulnerability Priority CRITICAL 100KEV 2023-11-16TI-2022-02989 Sophos Firewall Code Injection Vulnerability Priority CRITICAL 100KEV 2022-09-23TI-2022-00937 Sophos Firewall Authentication Bypass Vulnerability Priority CRITICAL 100KEV 2022-03-31TI-2020-15463 Sophos SG UTM Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Sophos Anti-virus 35 records HIGH Web Appliance 17 records CRITICAL Anti-virus 12 records MEDIUM Firewall Firmware 10 records MEDIUM Sophos Puremessage Anti-virus 9 records HIGH Unified Threat Management Software 9 records HIGH Xg Firewall Firmware 9 records CRITICAL Safeguard Easy Device Encryption Client 8 records LOW

Records

9 records in Xg Firewall Firmware · all components

TI-2022-03413 CVE-2022-3713 · GHSA-3rf2-rmw5-85x7

Code injection in Sophos Firewall

Priority MEDIUM 41

A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00747 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 +1 CWE-94
TI-2022-03410 CVE-2022-3709 · GHSA-6784-6qw8-28jj

Cross-site scripting in Sophos Firewall

Priority MEDIUM 40

A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.0088 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 +1 CWE-79
TI-2022-02981 CVE-2022-3226 · GHSA-3f66-9wgv-7rw2

OS command injection in Sophos Firewall

Priority LOW 37

An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01897 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 +1 CWE-78
TI-2022-03397 CVE-2022-3696 · GHSA-x8cr-3jh5-wvwp

Code injection in Sophos Firewall

Priority LOW 36

A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0125 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 CWE-94
TI-2022-03412 CVE-2022-3711 · GHSA-8jm7-jj8h-v5xq

SQL injection in Sophos Firewall

Priority LOW 21

A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00777 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 CWE-89
TI-2022-03411 CVE-2022-3710 · GHSA-9c5q-pm67-4j2r

SQL injection in Sophos Firewall

Priority LOW 15

A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00793 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 CWE-89
Open these records in search →