Medium · 6.8 CVE-2021-25267 EUVD-2021-12178GHSA-5fg7-mh37-fjrv

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.…

Published May 5, 2022 · Updated Aug 3, 2024 · Assigned by Sophos

Description

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA.

Vendor	Product	Affected	Fixed
Sophos	Sophos Firewall	unspecified – < 19.0 GA	19.0 GA