# Sophos vulnerabilities > Sophos has 162 published vulnerabilities across 74 products in our catalogue. 7 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Sophos Anti-Virus, with 36. If you run Sophos software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/sophos ## At a glance - **Published vulnerabilities:** 162 - **Known to be exploited:** 7 - **Products:** 74 - **Versions:** 667 - **Most recently added to the known-exploited list:** [CVE-2020-29574](https://www.precursorintelligence.com/what-is/cve-2020-29574), 6 February 2025. We keep watching the list. ## Which Sophos products have the most vulnerabilities? - [Sophos Anti-Virus](https://www.precursorintelligence.com/product/sophos/sophos_anti-virus): 36 published vulnerabilities, 53 versions - [Web Appliance](https://www.precursorintelligence.com/product/sophos/web_appliance): 18 published vulnerabilities, 140 versions - [Xg Firewall](https://www.precursorintelligence.com/product/sophos/xg_firewall): 13 published vulnerabilities, 0 versions - [Anti-Virus](https://www.precursorintelligence.com/product/sophos/anti-virus): 12 published vulnerabilities, 48 versions - [Xg Firewall Firmware](https://www.precursorintelligence.com/product/sophos/xg_firewall_firmware): 9 published vulnerabilities, 3 versions - [Unified Threat Management Software](https://www.precursorintelligence.com/product/sophos/unified_threat_management_software): 9 published vulnerabilities, 11 versions - [Sophos Puremessage Anti-Virus](https://www.precursorintelligence.com/product/sophos/sophos_puremessage_anti-virus): 9 published vulnerabilities, 1 version - [Safeguard Easy Device Encryption Client](https://www.precursorintelligence.com/product/sophos/safeguard_easy_device_encryption_client): 8 published vulnerabilities, 6 versions - [Sophos Small Business Suite](https://www.precursorintelligence.com/product/sophos/sophos_small_business_suite): 8 published vulnerabilities, 1 version - [Sfos](https://www.precursorintelligence.com/product/sophos/sfos): 8 published vulnerabilities, 9 versions Each product page lists its own known-exploited flaws. ## Which Sophos vulnerabilities are being exploited? 7 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2020-29574](https://www.precursorintelligence.com/what-is/cve-2020-29574): CyberoamOS (CROS) SQL Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 4.7%, known exploited since 6 February 2025. - [CVE-2020-15069](https://www.precursorintelligence.com/what-is/cve-2020-15069): Sophos XG Firewall Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 11%, known exploited since 6 February 2025. - [CVE-2023-1671](https://www.precursorintelligence.com/what-is/cve-2023-1671): Sophos Web Appliance Command Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 16 November 2023. - [CVE-2022-3236](https://www.precursorintelligence.com/what-is/cve-2022-3236): Sophos Firewall Code Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 99%, known exploited since 23 September 2022. - [CVE-2022-1040](https://www.precursorintelligence.com/what-is/cve-2022-1040): Sophos Firewall Authentication Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 31 March 2022. - [CVE-2020-25223](https://www.precursorintelligence.com/what-is/cve-2020-25223): Sophos SG UTM Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 25 March 2022. - [CVE-2020-12271](https://www.precursorintelligence.com/what-is/cve-2020-12271): Sophos SFOS SQL Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 42%, known exploited since 3 November 2021. ## Which Sophos flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2023-1671](https://www.precursorintelligence.com/what-is/cve-2023-1671): >99%, Critical (CVSS 9.8), known exploited - [CVE-2022-1040](https://www.precursorintelligence.com/what-is/cve-2022-1040): >99%, Critical (CVSS 9.8), known exploited - [CVE-2022-3236](https://www.precursorintelligence.com/what-is/cve-2022-3236): 99%, Critical (CVSS 9.8), known exploited ## All Sophos products we track 60 products with at least one tracked version, most vulnerabilities first: - [Sophos Anti-Virus](https://www.precursorintelligence.com/product/sophos/sophos_anti-virus): 36 vulnerabilities, 53 versions - [Web Appliance](https://www.precursorintelligence.com/product/sophos/web_appliance): 18 vulnerabilities, 140 versions - [Anti-Virus](https://www.precursorintelligence.com/product/sophos/anti-virus): 12 vulnerabilities, 48 versions - [Xg Firewall Firmware](https://www.precursorintelligence.com/product/sophos/xg_firewall_firmware): 9 vulnerabilities, 3 versions - [Unified Threat Management Software](https://www.precursorintelligence.com/product/sophos/unified_threat_management_software): 9 vulnerabilities, 11 versions - [Sophos Puremessage Anti-Virus](https://www.precursorintelligence.com/product/sophos/sophos_puremessage_anti-virus): 9 vulnerabilities, 1 version - [Safeguard Easy Device Encryption Client](https://www.precursorintelligence.com/product/sophos/safeguard_easy_device_encryption_client): 8 vulnerabilities, 6 versions - [Sophos Small Business Suite](https://www.precursorintelligence.com/product/sophos/sophos_small_business_suite): 8 vulnerabilities, 1 version - [Sfos](https://www.precursorintelligence.com/product/sophos/sfos): 8 vulnerabilities, 9 versions - [Unified Threat Management](https://www.precursorintelligence.com/product/sophos/unified_threat_management): 7 vulnerabilities, 33 versions - [Safeguard Enterprise Client](https://www.precursorintelligence.com/product/sophos/safeguard_enterprise_client): 7 vulnerabilities, 6 versions - [Safeguard LAN Crypt Client](https://www.precursorintelligence.com/product/sophos/safeguard_lan_crypt_client): 7 vulnerabilities, 3 versions - [Firewall](https://www.precursorintelligence.com/product/sophos/firewall): 6 vulnerabilities, 4 versions - [Web Appliance Firmware](https://www.precursorintelligence.com/product/sophos/web_appliance_firmware): 6 vulnerabilities, 79 versions - [Scanning Engine](https://www.precursorintelligence.com/product/sophos/scanning_engine): 4 vulnerabilities, 2 versions - [Hitmanpro.alert](https://www.precursorintelligence.com/product/sophos/hitmanpro.alert): 4 vulnerabilities, 3 versions - [Hitmanpro](https://www.precursorintelligence.com/product/sophos/hitmanpro): 4 vulnerabilities, 3 versions - [Firewall Firmware](https://www.precursorintelligence.com/product/sophos/firewall_firmware): 3 vulnerabilities, 1 version - [Endpoint Protection](https://www.precursorintelligence.com/product/sophos/endpoint_protection): 3 vulnerabilities, 2 versions - [Puremessage for Microsoft Exchange](https://www.precursorintelligence.com/product/sophos/puremessage_for_microsoft_exchange): 3 vulnerabilities, 1 version - [Small Business Suite](https://www.precursorintelligence.com/product/sophos/small_business_suite): 3 vulnerabilities, 2 versions - [Sophos Tester](https://www.precursorintelligence.com/product/sophos/sophos_tester): 2 vulnerabilities, 1 version - [Intercept X for Server](https://www.precursorintelligence.com/product/sophos/intercept_x_for_server): 2 vulnerabilities, 1 version - [Es4000](https://www.precursorintelligence.com/product/sophos/es4000): 2 vulnerabilities, 1 version - [Cyberoamos](https://www.precursorintelligence.com/product/sophos/cyberoamos): 2 vulnerabilities, 7 versions - [Intercept X](https://www.precursorintelligence.com/product/sophos/intercept_x): 2 vulnerabilities, 2 versions - [Unified Threat Management Up2date](https://www.precursorintelligence.com/product/sophos/unified_threat_management_up2date): 2 vulnerabilities, 54 versions - [Es1000](https://www.precursorintelligence.com/product/sophos/es1000): 2 vulnerabilities, 1 version - [Email Appliance](https://www.precursorintelligence.com/product/sophos/email_appliance): 2 vulnerabilities, 4 versions - [Intercept X Endpoint](https://www.precursorintelligence.com/product/sophos/intercept_x_endpoint): 2 vulnerabilities, 1 version - [Mobile](https://www.precursorintelligence.com/product/sophos/mobile): 2 vulnerabilities, 5 versions - [Puremessage](https://www.precursorintelligence.com/product/sophos/puremessage): 1 vulnerability, 1 version - [Anti-Virus for Sophos Central](https://www.precursorintelligence.com/product/sophos/anti-virus_for_sophos_central): 1 vulnerability, 9 versions - [Safeguard Enterprise](https://www.precursorintelligence.com/product/sophos/safeguard_enterprise): 1 vulnerability, 1 version - [Cyberoam Cr25ing UTM Firmware](https://www.precursorintelligence.com/product/sophos/cyberoam_cr25ing_utm_firmware): 1 vulnerability, 1 version - [Safeguard Enterprise Device Encryption](https://www.precursorintelligence.com/product/sophos/safeguard_enterprise_device_encryption): 1 vulnerability, 9 versions - [Safeguard Privatecrypto](https://www.precursorintelligence.com/product/sophos/safeguard_privatecrypto): 1 vulnerability, 1 version - [Cyberoam Cr100ing UTM Firmware](https://www.precursorintelligence.com/product/sophos/cyberoam_cr100ing_utm_firmware): 1 vulnerability, 1 version - [Secure Web Gateway](https://www.precursorintelligence.com/product/sophos/secure_web_gateway): 1 vulnerability, 1 version - [Sophos Endpoint Security and Control](https://www.precursorintelligence.com/product/sophos/sophos_endpoint_security_and_control): 1 vulnerability, 1 version - [Sophos Mailmonitor](https://www.precursorintelligence.com/product/sophos/sophos_mailmonitor): 1 vulnerability, 2 versions - [Cloud Optix](https://www.precursorintelligence.com/product/sophos/cloud_optix): 1 vulnerability, 1 version - [Sophos Secure Email](https://www.precursorintelligence.com/product/sophos/sophos_secure_email): 1 vulnerability, 31 versions - [Sophos Secure Workspace](https://www.precursorintelligence.com/product/sophos/sophos_secure_workspace): 1 vulnerability, 1 version - [Taegis Endpoint Agent](https://www.precursorintelligence.com/product/sophos/taegis_endpoint_agent): 1 vulnerability, 42 versions - [Threat Detection Engine](https://www.precursorintelligence.com/product/sophos/threat_detection_engine): 1 vulnerability, 14 versions - [Astaro Security Linux](https://www.precursorintelligence.com/product/sophos/astaro_security_linux): 1 vulnerability, 1 version - [Astaro Security Gateway Firmware](https://www.precursorintelligence.com/product/sophos/astaro_security_gateway_firmware): 1 vulnerability, 2 versions - [Anti-Virus for Sophos Home](https://www.precursorintelligence.com/product/sophos/anti-virus_for_sophos_home): 1 vulnerability, 13 versions - [Enterprise Console](https://www.precursorintelligence.com/product/sophos/enterprise_console): 1 vulnerability, 4 versions - [Disk Encryption](https://www.precursorintelligence.com/product/sophos/disk_encryption): 1 vulnerability, 3 versions - [Free Encryption](https://www.precursorintelligence.com/product/sophos/free_encryption): 1 vulnerability, 1 version - [Cyberoam Firmware](https://www.precursorintelligence.com/product/sophos/cyberoam_firmware): 1 vulnerability, 1 version - [Cyberoam Cr35ing UTM Firmware](https://www.precursorintelligence.com/product/sophos/cyberoam_cr35ing_utm_firmware): 1 vulnerability, 2 versions - [Home](https://www.precursorintelligence.com/product/sophos/home): 1 vulnerability, 1 version - [Invincea Dell Protected Workspace](https://www.precursorintelligence.com/product/sophos/invincea_dell_protected_workspace): 1 vulnerability, 1 version - [Invincea-X](https://www.precursorintelligence.com/product/sophos/invincea-x): 1 vulnerability, 1 version - [Ipsec Client](https://www.precursorintelligence.com/product/sophos/ipsec_client): 1 vulnerability, 6 versions - [Mobile Control Eas Proxy](https://www.precursorintelligence.com/product/sophos/mobile_control_eas_proxy): 1 vulnerability, 1 version - [United Threat Management](https://www.precursorintelligence.com/product/sophos/united_threat_management): 0 vulnerabilities, 26 versions ## Questions ### How many vulnerabilities does Sophos have? Our catalogue lists 162 published vulnerabilities across 74 products and 667 versions from Sophos. The most recent Sophos flaw added to the known-exploited list is CVE-2020-29574, on 6 February 2025. ### Which Sophos vulnerabilities are being exploited? 7 Sophos vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2020-29574, CVE-2020-15069 and CVE-2023-1671. The full list is on this page. ### Which Sophos product has the most vulnerabilities? Sophos Anti-Virus, with 36 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Sophos vulnerabilities? Create a Precursor Intelligence account and track the Sophos products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Sophos? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact