Skip to content
OpenAdvisories
Medium · 6.8 CVE-2022-3709 EUVD-2022-43066GHSA-6784-6qw8-28jj

A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases…

Published Dec 1, 2022 · Updated Apr 24, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Firewall Category: Network devices

Description

A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA.

Affected products

VendorProductAffectedFixed
Sophos Sophos Firewall unspecified – < 19.5 GA, unspecified – < 19.0 MR2, unspecified – < 18.5 MR5 19.5 GA

Advisories 1

References