Skip to contentSophos Firewall Firmware vulnerabilities
- sophos firewall, firewall firmware +1 moreA post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0...CVE-2024-13973EPSS 12.3%6.8 Medium
- sophos firewall, firewall firmware +1 moreA business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21...CVE-2024-139748.1 High
- sophos firewall, firewall firmware +1 moreA command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21...CVE-2025-73828.8 High
- sophos firewall, firewall firmware +1 moreAn SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions...CVE-2025-7624EPSS 10.5%9.8 Critical
- sophos firewall, firewall firmware +1 moreAn arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos...CVE-2025-6704EPSS 11.8%9.8 Critical
- sophos firewall, firewall firmware +1 moreA post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code...CVE-2024-127298.8 High
- sophos firewall, firewall firmware +1 moreA weak credentials vulnerability potentially allows privileged system access via SSH to Sophos...CVE-2024-127289.8 Critical
- sophos firewall, firewall firmware +1 moreA pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall...CVE-2024-127279.8 Critical
- sophos firewall, xg firewall firmware +1 moreA code injection vulnerability allows adjacent attackers to execute code in the Wifi controller...CVE-2022-37138.8 High
- sophos firewall, xg firewall firmware +1 moreA post-auth read-only SQL injection vulnerability allows users to read non-sensitive...CVE-2022-37114.3 Medium
- sophos firewall, xg firewall firmware +1 moreA post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive...CVE-2022-37102.7 Low
- sophos firewall, xg firewall firmware +1 moreA stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin...CVE-2022-37096.8 Medium
- sophos firewall, xg firewall firmware +1 moreA post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos...CVE-2022-36967.2 High
- sophos firewall, xg firewall firmware +1 moreAn OS command injection vulnerability allows admins to execute code via SSL VPN configuration...CVE-2022-32267.2 High
- sophos firewall, firewall firmware +1 moreMultiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to...CVE-2021-252688.4 High
- sophos firewall, firewall firmware +1 moreMultiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin...CVE-2021-252676.8 Medium
- sophos xg firewall firmwareTwo OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08...CVE-2020-173528.8 High
- sophos xg firewall firmwareA SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0...CVE-2020-155049.8 Critical
- sophos xg firewall, xg firewall firmware +1 moreSophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via...CVE-2020-15069In KEVEPSS 10.7%9.8 Critical