Vendor
Sophos
49 known vulnerabilities.
Products
Sophos Firewall 21
Sophos Connect Client 4
Sophos UTM 3
Sophos Web Appliance 3
SG UTM 2
Sophos Home for macOS 2
Sophos Intercept X for Windows 1
Intercept X for Mobile (Android) 1
Sophos Authenticator (Android) 1
Sophos Secure Workspace for Android 1
HitmanPro 1
Sophos Intercept X 1
Sophos Email Appliance 1
Sophos Mobile managed on-premises 1
SSL VPN client 1
Taegis Endpoint Agent (Linux) 1
Sophos Intercept X for Windows Installer 1
Sophos Endpoint for macOS 1
AP6 Series Wireless Access Points 1
Intercept X for MacOS 1
Intercept X for MacOS (OPM) 1
Sophos Intercept X for Windows Core Agent 1
Intercept X Advanced 1
Intercept X Advanced for Server 1
Sophos Exploit Prevention 1
HitmanPro.Alert 1
XG Firewall 0
Firewall < v19.5.0 0
Firewall 0
Firewall < v19.5 MR3 0
Firewall < v19.5 MR2 0
Firewall < v20.0 EAP1 0
Firewall < v19.5 MR1-1 0
Firewall < v19.5 MR1 0
Firewall < v19.5 GA 0
Firewall < v19.0 MR3 0
Firewall < v19.0 MR2 0
Firewall < v19.0 MR1-1 0
Firewall < v19.0 MR1 0
Firewall < v19.5 MR4 0
18 results · Clear filters · Feed
-
High 8.1
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM…
-
High 8.1
A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lea…
-
High 8.8
A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adja…
-
High 8.8
A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and …
-
High 8.8
A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024…
-
High 7.5
A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a lo…
-
High 7.8
A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3…
-
High 8.8
A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Soph…
-
High 8.8
A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2024.2.0 an…
-
High 7.1
A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to…
-
High 7.2
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4…
-
High 8.8
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall rele…
-
High 7.2
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older th…
-
High 7.2
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewal…
-
High 7.2
Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall o…
-
High 8.4
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Fir…
-
High 8.8
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute cod…
-
High 8.8
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before vers…