Vendor
Sophos
49 known vulnerabilities.
Products
Sophos Firewall 21
Sophos Connect Client 4
Sophos UTM 3
Sophos Web Appliance 3
SG UTM 2
Sophos Home for macOS 2
Sophos Intercept X for Windows 1
Intercept X for Mobile (Android) 1
Sophos Authenticator (Android) 1
Sophos Secure Workspace for Android 1
HitmanPro 1
Sophos Intercept X 1
Sophos Email Appliance 1
Sophos Mobile managed on-premises 1
SSL VPN client 1
Taegis Endpoint Agent (Linux) 1
Sophos Intercept X for Windows Installer 1
Sophos Endpoint for macOS 1
AP6 Series Wireless Access Points 1
Intercept X for MacOS 1
Intercept X for MacOS (OPM) 1
Sophos Intercept X for Windows Core Agent 1
Intercept X Advanced 1
Intercept X Advanced for Server 1
Sophos Exploit Prevention 1
HitmanPro.Alert 1
XG Firewall 0
Firewall < v19.5.0 0
Firewall 0
Firewall < v19.5 MR3 0
Firewall < v19.5 MR2 0
Firewall < v20.0 EAP1 0
Firewall < v19.5 MR1-1 0
Firewall < v19.5 MR1 0
Firewall < v19.5 GA 0
Firewall < v19.0 MR3 0
Firewall < v19.0 MR2 0
Firewall < v19.0 MR1-1 0
Firewall < v19.0 MR1 0
Firewall < v19.5 MR4 0
12 results · Clear filters · Feed
-
Medium 6.8CVE-2024-13973 EPSS 12%
A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potent…
-
Medium 4.7
A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sopho…
-
Medium 6.5
A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows …
-
Medium 5.5
An information disclosure vulnerability allows sensitive key material to be included in technical support archives in S…
-
Medium 4.3
A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versio…
-
Medium 4.3
A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in…
-
Medium 6.8
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Soph…
-
Medium 6.8
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall ol…
-
Medium 5.3
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial…
-
Medium 6.1
A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, poten…
-
Medium 4.4
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service …
-
Medium 5.9CVE-2021-36808 Public exploit
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before ver…