High · 8.4 CVE-2021-25268 EUVD-2021-12179GHSA-6gw9-fj88-98q3

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than ver…

Published May 5, 2022 · Updated Aug 3, 2024 · Assigned by Sophos

Vendor: Sophos Product: Sophos Firewall Category: Network devices

Description

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA.

Affected products

Vendor	Product	Affected	Fixed
Sophos	Sophos Firewall	unspecified – < 19.0 GA	19.0 GA

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0