Skip to contentSophos Firewall vulnerabilities
- sophos firewall, firewall firmware +1 moreA post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0...CVE-2024-13973EPSS 12.3%6.8 Medium
- sophos firewall, firewall firmware +1 moreA business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21...CVE-2024-139748.1 High
- sophos firewall, firewall firmware +1 moreA command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21...CVE-2025-73828.8 High
- sophos firewall, firewall firmware +1 moreAn SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions...CVE-2025-7624EPSS 10.5%9.8 Critical
- sophos firewall, firewall firmware +1 moreAn arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos...CVE-2025-6704EPSS 11.8%9.8 Critical
- sophos firewall, firewall firmware +1 moreA post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code...CVE-2024-127298.8 High
- sophos firewall, firewall firmware +1 moreA weak credentials vulnerability potentially allows privileged system access via SSH to Sophos...CVE-2024-127289.8 Critical
- sophos firewall, firewall firmware +1 moreA pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall...CVE-2024-127279.8 Critical
- sophos firewallA password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers...CVE-2023-55527.1 High
- sophos firewall, xg firewall firmware +1 moreA code injection vulnerability allows adjacent attackers to execute code in the Wifi controller...CVE-2022-37138.8 High
- sophos firewall, xg firewall firmware +1 moreA post-auth read-only SQL injection vulnerability allows users to read non-sensitive...CVE-2022-37114.3 Medium
- sophos firewall, xg firewall firmware +1 moreA post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive...CVE-2022-37102.7 Low
- sophos firewall, xg firewall firmware +1 moreA stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin...CVE-2022-37096.8 Medium
- sophos firewall, xg firewall firmware +1 moreA post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos...CVE-2022-36967.2 High
- sophos firewall, xg firewall firmware +1 moreAn OS command injection vulnerability allows admins to execute code via SSL VPN configuration...CVE-2022-32267.2 High
- sophos firewallA code injection vulnerability in the User Portal and Webadmin allows a remote attacker to...CVE-2022-3236In KEVEPSS 98.9%9.8 Critical
- sophos firewallMultiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super...CVE-2022-18077.2 High
- sophos firewall, firewall firmware +1 moreMultiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to...CVE-2021-252688.4 High
- sophos firewall, firewall firmware +1 moreMultiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin...CVE-2021-252676.8 Medium
- sophos firewall, sfos +1 moreAn information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to...CVE-2022-03315.3 Medium
- sophos firewall, sfos +1 moreAn authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker...CVE-2022-1040In KEVPublic exploitEPSS 99.8%9.8 Critical