Vendor
Sophos
49 known vulnerabilities.
Products
Sophos Firewall 21
Sophos Connect Client 4
Sophos UTM 3
Sophos Web Appliance 3
SG UTM 2
Sophos Home for macOS 2
Sophos Intercept X for Windows 1
Intercept X for Mobile (Android) 1
Sophos Authenticator (Android) 1
Sophos Secure Workspace for Android 1
HitmanPro 1
Sophos Intercept X 1
Sophos Email Appliance 1
Sophos Mobile managed on-premises 1
SSL VPN client 1
Taegis Endpoint Agent (Linux) 1
Sophos Intercept X for Windows Installer 1
Sophos Endpoint for macOS 1
AP6 Series Wireless Access Points 1
Intercept X for MacOS 1
Intercept X for MacOS (OPM) 1
Sophos Intercept X for Windows Core Agent 1
Intercept X Advanced 1
Intercept X Advanced for Server 1
Sophos Exploit Prevention 1
HitmanPro.Alert 1
XG Firewall 0
Firewall < v19.5.0 0
Firewall 0
Firewall < v19.5 MR3 0
Firewall < v19.5 MR2 0
Firewall < v20.0 EAP1 0
Firewall < v19.5 MR1-1 0
Firewall < v19.5 MR1 0
Firewall < v19.5 GA 0
Firewall < v19.0 MR3 0
Firewall < v19.0 MR2 0
Firewall < v19.0 MR1-1 0
Firewall < v19.0 MR1 0
Firewall < v19.5 MR4 0
10 results · Clear filters · Feed
-
Critical 9.3
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS…
-
Critical 9.8
An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series W…
-
Critical 9.8CVE-2025-7624 EPSS 11%
An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (…
-
Critical 9.8CVE-2025-6704 EPSS 12%
An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than…
-
Critical 9.8
A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than vers…
-
Critical 9.8
A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 …
-
Critical 9.8
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.1…
KEV Nov 16, 2023 -
Critical 9.8
An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in So…
-
Critical 9.8
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firew…
KEV Sep 23, 2022 -
Critical 9.8
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Soph…
KEV Mar 31, 2022