Skip to contentSophos Unified Threat Management vulnerabilities
- sophos utm, unified threat management +1 moreConfd log files contain local users', including root’s, SHA512crypt password hashes with...CVE-2022-06523.3 Low
- sophos utm, unified threat management +1 moreA post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated...CVE-2022-03868.8 High
- sophos sg utm, unified threat management up2date +1 moreAn authenticated user could potentially execute code via an SQLi vulnerability in the user portal...CVE-2021-368078.8 High
- sophos utm, unified threat management +1 moreStored XSS can execute as administrator in quarantined email detail view in Sophos UTM before...CVE-2021-252734.8 Medium
- sophos sg utm, unified threat management +1 moreA remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5,...CVE-2020-25223In KEVPublic exploitEPSS 96.8%9.8 Critical
- sophos unified threat management softwareThe Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local...CVE-2016-74424.4 Medium
- sophos unified threat management softwareThe Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local...CVE-2016-73974.4 Medium
- sophos unified threat management softwareCross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows...CVE-2016-20466.1 Medium
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- openbsd openssh, apple mac os x, hp virtual customer access system +3 more +5 moreThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...CVE-2016-0778Fix availableEPSS 20.9%8.1 High
- openbsd openssh, apple mac os x, hp remote device access virtual customer access system +3 more +5 moreThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...CVE-2016-0777Public exploitFix availableEPSS 63.5%6.5 Medium
- isc dhcp, canonical ubuntu linux, debian linux +1 more +3 moreISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to...CVE-2015-8605Fix availableEPSS 82.7%6.5 Medium
- sophos unified threat management, unified threat management software +1 moreMemory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to...CVE-2014-25377.8 High
- sophos unified threat management softwareUnspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105...CVE-2013-593210.0 High
- astaro security gateway, security gateway software, sophos unified threat management +1 more +3 moreCross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro...CVE-2012-32384.3 Medium