Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Sophos Firewall 19.0 MR2, 19.5 GA Clear all filters
TI-2022-03412 CVE-2022-3711 · GHSA-8jm7-jj8h-v5xq

SQL injection in Sophos Firewall

Priority LOW 21

A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00777 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 CWE-89
TI-2022-03411 CVE-2022-3710 · GHSA-9c5q-pm67-4j2r

SQL injection in Sophos Firewall

Priority LOW 15

A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00793 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 CWE-89
TI-2022-03397 CVE-2022-3696 · GHSA-x8cr-3jh5-wvwp

Code injection in Sophos Firewall

Priority LOW 36

A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0125 Published 2022-12-01 Fixed in 19.5 GA, 19.0 MR2 CWE-94