Vendor
Sophos
49 known vulnerabilities.
Products
Sophos Firewall 21
Sophos Connect Client 4
Sophos UTM 3
Sophos Web Appliance 3
SG UTM 2
Sophos Home for macOS 2
Sophos Intercept X for Windows 1
Intercept X for Mobile (Android) 1
Sophos Authenticator (Android) 1
Sophos Secure Workspace for Android 1
HitmanPro 1
Sophos Intercept X 1
Sophos Email Appliance 1
Sophos Mobile managed on-premises 1
SSL VPN client 1
Taegis Endpoint Agent (Linux) 1
Sophos Intercept X for Windows Installer 1
Sophos Endpoint for macOS 1
AP6 Series Wireless Access Points 1
Intercept X for MacOS 1
Intercept X for MacOS (OPM) 1
Sophos Intercept X for Windows Core Agent 1
Intercept X Advanced 1
Intercept X Advanced for Server 1
Sophos Exploit Prevention 1
HitmanPro.Alert 1
XG Firewall 0
Firewall < v19.5.0 0
Firewall 0
Firewall < v19.5 MR3 0
Firewall < v19.5 MR2 0
Firewall < v20.0 EAP1 0
Firewall < v19.5 MR1-1 0
Firewall < v19.5 MR1 0
Firewall < v19.5 GA 0
Firewall < v19.0 MR3 0
Firewall < v19.0 MR2 0
Firewall < v19.0 MR1-1 0
Firewall < v19.0 MR1 0
Firewall < v19.5 MR4 0
49 results · Feed
-
Medium 6.1
A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, poten…
-
High 8.8
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before vers…
-
Medium 4.4
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service …
-
Medium 5.9CVE-2021-36808 Public exploit
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before ver…
-
Unscored —
A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 31…
-
Unscored —
A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.
-
Unscored —
Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.
-
Unscored —
In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administ…
-
Unscored —
A malicious website could execute code remotely in Sophos Connect Client before version 2.1.