Sophos Firewall vulnerabilities

• sophos firewall, firewall firmware +1 more A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0... CVE-2024-13973 EPSS 12.3% 6.8 MediumJuly 21, 2025
• sophos firewall, firewall firmware +1 more A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21... CVE-2024-13974 8.1 HighJuly 21, 2025
• sophos firewall, firewall firmware +1 more A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21... CVE-2025-7382 8.8 HighJuly 21, 2025
• sophos firewall, firewall firmware +1 more An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions... CVE-2025-7624 EPSS 10.5% 9.8 CriticalJuly 21, 2025
• sophos firewall, firewall firmware +1 more An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos... CVE-2025-6704 EPSS 11.8% 9.8 CriticalJuly 21, 2025
• sophos firewall, firewall firmware +1 more A post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code... CVE-2024-12729 8.8 HighDecember 19, 2024
• sophos firewall, firewall firmware +1 more A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos... CVE-2024-12728 9.8 CriticalDecember 19, 2024
• sophos firewall, firewall firmware +1 more A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall... CVE-2024-12727 9.8 CriticalDecember 19, 2024
• sophos firewall A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers... CVE-2023-5552 7.1 HighOctober 17, 2023
• sophos firewall, xg firewall firmware +1 more A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller... CVE-2022-3713 8.8 HighDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A post-auth read-only SQL injection vulnerability allows users to read non-sensitive... CVE-2022-3711 4.3 MediumDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive... CVE-2022-3710 2.7 LowDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin... CVE-2022-3709 6.8 MediumDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos... CVE-2022-3696 7.2 HighDecember 1, 2022
• sophos firewall, xg firewall firmware +1 more An OS command injection vulnerability allows admins to execute code via SSL VPN configuration... CVE-2022-3226 7.2 HighDecember 1, 2022
• sophos firewall A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to... CVE-2022-3236 In KEV EPSS 98.9% 9.8 CriticalSeptember 23, 2022
• sophos firewall Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super... CVE-2022-1807 7.2 HighSeptember 7, 2022
• sophos firewall, firewall firmware +1 more Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to... CVE-2021-25268 8.4 HighMay 5, 2022
• sophos firewall, firewall firmware +1 more Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin... CVE-2021-25267 6.8 MediumMay 5, 2022
• sophos firewall, sfos +1 more An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to... CVE-2022-0331 5.3 MediumMarch 29, 2022
• sophos firewall, sfos +1 more An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker... CVE-2022-1040 In KEVPublic exploit EPSS 99.8% 9.8 CriticalMarch 25, 2022
• sophos xg firewall firmware Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08... CVE-2020-17352 8.8 HighAugust 7, 2020
• sophos xg firewall firmware A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0... CVE-2020-15504 9.8 CriticalJuly 10, 2020
• sophos xg firewall, xg firewall firmware +1 more Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via... CVE-2020-15069 In KEV EPSS 10.7% 9.8 CriticalJune 29, 2020