Skip to contentSophos Web Appliance vulnerabilities
- sophos web applianceReflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9...CVE-2023-333364.8 Medium
- sophos web applianceA pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance...CVE-2023-1671In KEVPublic exploitEPSS 100.0%9.8 Critical
- sophos web applianceA post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older...CVE-2022-49347.2 High
- sophos web applianceA reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older...CVE-2020-366926.5 Medium
- sophos web applianceThe Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.CVE-2017-95236.1 Medium
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.CVE-2017-6412Public exploit8.1 High
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible...CVE-2017-61844.7 Medium
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities...CVE-2017-61837.2 High
- sophos web applianceIn Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible...CVE-2017-6182Public exploitEPSS 16.7%9.8 Critical
- sophos web applianceThe Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a...CVE-2016-9554Public exploitEPSS 25.1%7.2 High
- sophos web applianceThe Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection...CVE-2016-9553Public exploitEPSS 19.8%7.2 High
- sophos web appliance, web appliance firmware +1 moreThe network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2...CVE-2014-2850Public exploitEPSS 57.6%8.5 High
- sophos web appliance, web appliance firmware +1 moreThe Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows...CVE-2014-2849Public exploitEPSS 60.9%8.5 High
- sophos web appliance, web appliance firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow...CVE-2013-2643Public exploit4.3 Medium
- sophos web appliance, web appliance firmware +1 moreSophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via...CVE-2013-2642Public exploit9.3 High
- sophos web appliance, web appliance firmware +1 moreDirectory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows...CVE-2013-2641Public exploitEPSS 71.0%5.0 Medium
- sophos web applianceThe close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9...CVE-2013-4984Public exploit7.2 High
- sophos web appliance firmwareThe get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3...CVE-2013-4983Public exploitEPSS 90.1%10.0 High