[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLZMIsqSQdiTpwoPk4hoGzj0paSyTlEzCNNI24kxiozU":3,"g5a-ex:sophos\u002Fendpoint_protection@*":66,"g5a-family:sophos\u002Fendpoint_protection":68},{"success":4,"data":5},true,{"product":6,"versions":20,"topVulnerabilitiesByEpss":23,"kevVulnerabilities":43,"seoMetadata":44,"meta":63},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":19},"sophos","endpoint_protection",2,3,0,"2020-02-24",[14,17],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},"10.7",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2020-01-14","Endpoint Protection by Sophos is a technology product with 2 tracked versions and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[21,22],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},[24,32,38],{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":31},"CVE-2018-9233","Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\\Sophos\\Sophos Anti-Virus\\Config\\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose unsafe malware settings, via rainbow tables or other approaches.","2018-04-05",7.8,"v3.0","High",0.0165,{"cveId":33,"description":34,"publishedDate":27,"cvssScore":35,"cvssVersion":29,"severity":36,"isKev":16,"epssScore":37},"CVE-2018-4863","Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\services\\Sophos Endpoint Defense\\ registry key.",5.5,"Medium",0.0118,{"cveId":39,"description":40,"publishedDate":12,"cvssScore":28,"cvssVersion":41,"severity":30,"isKev":16,"epssScore":42},"CVE-2020-9363","The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extraction.","v3.1",0.00972,[],{"title":45,"metaDescription":46,"keywords":47,"structuredData":48},"Endpoint Protection by Sophos - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Endpoint Protection by Sophos covering 2 versions with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Endpoint Protection vulnerabilities, Endpoint Protection security, Endpoint Protection CVE, Sophos Endpoint Protection, Endpoint Protection threat intelligence, Sophos security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":49,"@type":50,"name":51,"description":46,"url":52,"manufacturer":53,"applicationCategory":57,"softwareVersion":58,"mainEntity":59},"https:\u002F\u002Fschema.org","SoftwareApplication","Endpoint Protection","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsophos\u002Fendpoint_protection",{"@type":54,"name":55,"url":56},"Organization","Sophos","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsophos","Security Software","2 versions tracked",{"@type":60,"name":61,"description":62,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Endpoint Protection Security Vulnerabilities","Security vulnerabilities affecting Endpoint Protection by Sophos",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":64,"apiVersion":65},"2026-10-17T12:13:02.659Z","3.0",{"rows":67,"total":11,"capped":16,"failed":11},[],[]]