High · 8.8 CVE-2022-0386 EUVD-2022-15535GHSA-fcjj-3vvm-98fr

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM befo…

Published Mar 21, 2022 · Updated Aug 2, 2024 · Assigned by Sophos

Vendor: Sophos Product: Sophos UTM Category: Network devices

Description

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.

Affected products

Vendor	Product	Affected	Fixed
Sophos	Sophos UTM	unspecified – < 9.710	9.710

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20220321-utm-9710