Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Sophos Firewall 19.0 GA Clear all filters
TI-2021-07520 CVE-2021-25268 · GHSA-6gw9-fj88-98q3

Cross-site scripting in Sophos Firewall

Priority LOW 38

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00912 Published 2022-05-05 Fixed in 19.0 GA CWE-79
TI-2021-07519 CVE-2021-25267 · GHSA-5fg7-mh37-fjrv

Cross-site scripting in Sophos Firewall

Priority LOW 39

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01093 Published 2022-05-05 Fixed in 19.0 GA CWE-79