[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fP5LekaAWT3NzHmS9sAOEh3IPU-gVdpLsEMT3bCbrvQQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":311,"kevVulnerabilities":364,"topProductsByCves":404,"seoMetadata":415,"meta":424},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":310},29857,"sophos",74,162,7,667,"2025-07-21","s",[16,23,30,36,42,47,52,56,62,66,70,75,78,81,85,90,93,97,100,104,107,111,115,119,123,127,131,135,139,142,146,150,154,157,161,164,169,173,177,181,185,189,193,196,200,203,206,209,213,216,219,222,227,231,234,238,243,248,252,256,259,262,266,269,272,275,279,282,286,290,293,297,301,305],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},156223,"sophos_anti-virus",53,36,0,"2014-02-10",{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":28,"last_cve_update":29},156239,"web_appliance",140,18,1,"2023-06-30",{"id":31,"product_name":32,"version_count":21,"cve_count":33,"kev_count":34,"last_cve_update":35},156241,"xg_firewall",13,2,"2022-12-01",{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":21,"last_cve_update":41},156169,"anti-virus",48,12,"2014-07-22",{"id":43,"product_name":44,"version_count":45,"cve_count":46,"kev_count":28,"last_cve_update":35},156242,"xg_firewall_firmware",3,9,{"id":48,"product_name":49,"version_count":50,"cve_count":46,"kev_count":21,"last_cve_update":51},156236,"unified_threat_management_software",11,"2016-10-03",{"id":53,"product_name":54,"version_count":28,"cve_count":46,"kev_count":21,"last_cve_update":55},156227,"sophos_puremessage_anti-virus","2008-07-15",{"id":57,"product_name":58,"version_count":59,"cve_count":60,"kev_count":21,"last_cve_update":61},156213,"safeguard_easy_device_encryption_client",6,8,"2018-07-09",{"id":63,"product_name":64,"version_count":28,"cve_count":60,"kev_count":21,"last_cve_update":65},156230,"sophos_small_business_suite","2005-07-19",{"id":67,"product_name":68,"version_count":46,"cve_count":60,"kev_count":34,"last_cve_update":69},156221,"sfos","2022-03-29",{"id":71,"product_name":72,"version_count":73,"cve_count":11,"kev_count":28,"last_cve_update":74},156235,"unified_threat_management",33,"2022-03-22",{"id":76,"product_name":77,"version_count":59,"cve_count":11,"kev_count":21,"last_cve_update":61},156215,"safeguard_enterprise_client",{"id":79,"product_name":80,"version_count":45,"cve_count":11,"kev_count":21,"last_cve_update":61},156217,"safeguard_lan_crypt_client",{"id":82,"product_name":83,"version_count":84,"cve_count":59,"kev_count":28,"last_cve_update":13},156196,"firewall",4,{"id":86,"product_name":87,"version_count":88,"cve_count":59,"kev_count":21,"last_cve_update":89},156240,"web_appliance_firmware",79,"2014-04-11",{"id":91,"product_name":92,"version_count":34,"cve_count":84,"kev_count":21,"last_cve_update":22},156219,"scanning_engine",{"id":94,"product_name":95,"version_count":45,"cve_count":84,"kev_count":21,"last_cve_update":96},156200,"hitmanpro.alert","2021-10-08",{"id":98,"product_name":99,"version_count":45,"cve_count":84,"kev_count":21,"last_cve_update":96},156199,"hitmanpro",{"id":101,"product_name":102,"version_count":21,"cve_count":84,"kev_count":21,"last_cve_update":103},156178,"connect","2023-03-01",{"id":105,"product_name":106,"version_count":28,"cve_count":45,"kev_count":21,"last_cve_update":13},156197,"firewall_firmware",{"id":108,"product_name":109,"version_count":34,"cve_count":45,"kev_count":21,"last_cve_update":110},156190,"endpoint_protection","2020-02-24",{"id":112,"product_name":113,"version_count":21,"cve_count":45,"kev_count":21,"last_cve_update":114},156191,"endpoint_security","2006-11-01",{"id":116,"product_name":117,"version_count":28,"cve_count":45,"kev_count":21,"last_cve_update":118},156212,"puremessage_for_microsoft_exchange","2009-08-27",{"id":120,"product_name":121,"version_count":34,"cve_count":45,"kev_count":21,"last_cve_update":122},156222,"small_business_suite","2007-08-28",{"id":124,"product_name":125,"version_count":21,"cve_count":34,"kev_count":21,"last_cve_update":126},156170,"anti-virus7.6.3","2009-08-06",{"id":128,"product_name":129,"version_count":28,"cve_count":34,"kev_count":21,"last_cve_update":130},156231,"sophos_tester","2018-02-02",{"id":132,"product_name":133,"version_count":21,"cve_count":34,"kev_count":21,"last_cve_update":134},156179,"cyberoam","2019-10-11",{"id":136,"product_name":137,"version_count":28,"cve_count":34,"kev_count":21,"last_cve_update":138},156204,"intercept_x_for_server","2021-11-26",{"id":140,"product_name":141,"version_count":28,"cve_count":34,"kev_count":21,"last_cve_update":55},156194,"es4000",{"id":143,"product_name":144,"version_count":11,"cve_count":34,"kev_count":28,"last_cve_update":145},156187,"cyberoamos","2020-12-11",{"id":147,"product_name":148,"version_count":34,"cve_count":34,"kev_count":21,"last_cve_update":149},156202,"intercept_x","2022-04-27",{"id":151,"product_name":152,"version_count":153,"cve_count":34,"kev_count":21,"last_cve_update":138},156237,"unified_threat_management_up2date",54,{"id":155,"product_name":156,"version_count":28,"cve_count":34,"kev_count":21,"last_cve_update":55},156193,"es1000",{"id":158,"product_name":159,"version_count":84,"cve_count":34,"kev_count":21,"last_cve_update":160},156189,"email_appliance","2023-11-30",{"id":162,"product_name":163,"version_count":28,"cve_count":34,"kev_count":21,"last_cve_update":138},156203,"intercept_x_endpoint",{"id":165,"product_name":166,"version_count":167,"cve_count":34,"kev_count":21,"last_cve_update":168},156209,"mobile",5,"2022-11-16",{"id":170,"product_name":171,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":172},156211,"puremessage","2018-01-26",{"id":174,"product_name":175,"version_count":46,"cve_count":28,"kev_count":21,"last_cve_update":176},156171,"anti-virus_for_sophos_central","2020-04-17",{"id":178,"product_name":179,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":180},156184,"cyberoam_cr35ing_utm","2016-04-06",{"id":182,"product_name":183,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":184},156214,"safeguard_enterprise","2012-08-29",{"id":186,"product_name":187,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":188},156183,"cyberoam_cr25ing_utm_firmware","2017-04-07",{"id":190,"product_name":191,"version_count":46,"cve_count":28,"kev_count":21,"last_cve_update":192},156216,"safeguard_enterprise_device_encryption","2012-08-24",{"id":194,"product_name":195,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":188},156182,"cyberoam_cr25ing_utm",{"id":197,"product_name":198,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":199},156218,"safeguard_privatecrypto","2012-09-07",{"id":201,"product_name":202,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":180},156181,"cyberoam_cr100ing_utm_firmware",{"id":204,"product_name":205,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":110},156220,"secure_web_gateway",{"id":207,"product_name":208,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":180},156180,"cyberoam_cr100ing_utm",{"id":210,"product_name":211,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":212},156224,"sophos_endpoint_security_and_control","2012-08-25",{"id":214,"product_name":215,"version_count":34,"cve_count":28,"kev_count":21,"last_cve_update":65},156225,"sophos_mailmonitor",{"id":217,"product_name":218,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":65},156226,"sophos_mailmonitor_for_notes_domino",{"id":220,"product_name":221,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":110},156177,"cloud_optix",{"id":223,"product_name":224,"version_count":225,"cve_count":28,"kev_count":21,"last_cve_update":226},156228,"sophos_secure_email",31,"2020-06-22",{"id":228,"product_name":229,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":230},156229,"sophos_secure_workspace","2021-10-30",{"id":232,"product_name":233,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":149},156176,"authenticator",{"id":235,"product_name":236,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":237},156232,"ssl_vpn_client","2022-03-08",{"id":239,"product_name":240,"version_count":241,"cve_count":28,"kev_count":21,"last_cve_update":242},156233,"taegis_endpoint_agent",42,"2025-04-11",{"id":244,"product_name":245,"version_count":246,"cve_count":28,"kev_count":21,"last_cve_update":247},156234,"threat_detection_engine",14,"2017-06-22",{"id":249,"product_name":250,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":251},156175,"astaro_security_linux","2004-12-31",{"id":253,"product_name":254,"version_count":34,"cve_count":28,"kev_count":21,"last_cve_update":255},156174,"astaro_security_gateway_firmware","2017-09-19",{"id":257,"product_name":258,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":255},156173,"astaro_security_gateway",{"id":260,"product_name":261,"version_count":33,"cve_count":28,"kev_count":21,"last_cve_update":176},156172,"anti-virus_for_sophos_home",{"id":263,"product_name":264,"version_count":84,"cve_count":28,"kev_count":21,"last_cve_update":265},156192,"enterprise_console","2014-06-25",{"id":267,"product_name":268,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":138},156195,"exploit_prevention",{"id":270,"product_name":271,"version_count":45,"cve_count":28,"kev_count":21,"last_cve_update":192},156188,"disk_encryption",{"id":273,"product_name":274,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":199},156198,"free_encryption",{"id":276,"product_name":277,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":278},156186,"cyberoam_firmware","2017-06-07",{"id":280,"product_name":281,"version_count":34,"cve_count":28,"kev_count":21,"last_cve_update":180},156185,"cyberoam_cr35ing_utm_firmware",{"id":283,"product_name":284,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":285},156201,"home","2021-05-17",{"id":287,"product_name":288,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":289},156205,"invincea_dell_protected_workspace","2018-04-24",{"id":291,"product_name":292,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":289},156206,"invincea-x",{"id":294,"product_name":295,"version_count":59,"cve_count":28,"kev_count":21,"last_cve_update":296},156207,"ipsec_client","2019-04-09",{"id":298,"product_name":299,"version_count":21,"cve_count":28,"kev_count":21,"last_cve_update":300},156208,"iview","2023-07-05",{"id":302,"product_name":303,"version_count":28,"cve_count":28,"kev_count":21,"last_cve_update":304},156210,"mobile_control_eas_proxy","2016-08-10",{"id":306,"product_name":307,"version_count":308,"cve_count":21,"kev_count":21,"last_cve_update":309},156238,"united_threat_management",26,null,"Sophos is a technology vendor with 74 tracked products and 162 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[312,320,329,333,338,342,346,350,355,359],{"cveId":313,"description":314,"publishedDate":315,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":319},"CVE-2023-1671","A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.","2023-04-04",9.8,"v3.1","Critical",0.99999,{"cveId":321,"description":322,"publishedDate":323,"cvssScore":324,"cvssVersion":325,"severity":326,"isKev":327,"epssScore":328},"CVE-2012-1456","The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, Panda Antivirus 10.0.2.7, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, and Trend Micro HouseCall 9.120.0.1004 allows remote attackers to bypass malware detection via a TAR file with an appended ZIP file.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.","2012-03-21",4.3,"v2","Medium",false,0.99934,{"cveId":330,"description":331,"publishedDate":323,"cvssScore":324,"cvssVersion":325,"severity":326,"isKev":327,"epssScore":332},"CVE-2012-1459","The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus 4.2.254.0, G Data AntiVirus 21, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, K7 AntiVirus 9.77.3565, Kaspersky Anti-Virus 7.0.0.125, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, Panda Antivirus 10.0.2.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Sophos Anti-Virus 4.61.0, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Trend Micro AntiVirus 9.120.0.1004, Trend Micro HouseCall 9.120.0.1004, VBA32 3.12.14.2, and VirusBuster 13.6.151.0 allows remote attackers to bypass malware detection via a TAR archive entry with a length field corresponding to that entire entry, plus part of the header of the next entry.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different TAR parser implementations.",0.99814,{"cveId":334,"description":335,"publishedDate":336,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":337},"CVE-2022-1040","An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.","2022-03-25",0.99796,{"cveId":339,"description":340,"publishedDate":323,"cvssScore":324,"cvssVersion":325,"severity":326,"isKev":327,"epssScore":341},"CVE-2012-1446","The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified encoding field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.",0.99723,{"cveId":343,"description":344,"publishedDate":323,"cvssScore":324,"cvssVersion":325,"severity":326,"isKev":327,"epssScore":345},"CVE-2012-1443","The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0.1, PC Tools AntiVirus 7.0.3.5, F-Prot Antivirus 4.6.2.117, VirusBuster 13.6.151.0, Fortinet Antivirus 4.2.254.0, Antiy Labs AVL SDK 2.0.3.7, K7 AntiVirus 9.77.3565, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Jiangmin Antivirus 13.0.900, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Sophos Anti-Virus 4.61.0, NOD32 Antivirus 5795, Avira AntiVir 7.11.1.163, Norman Antivirus 6.06.12, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Panda Antivirus 10.0.2.7, McAfee Gateway (formerly Webwasher) 2010.1C, Trend Micro AntiVirus 9.120.0.1004, Comodo Antivirus 7424, Bitdefender 7.2, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, nProtect Anti-Virus 2011-01-17.01, AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, avast! Antivirus 4.8.1351.0 and 5.0.677.0, and VBA32 3.12.14.2 allows user-assisted remote attackers to bypass malware detection via a RAR file with an initial MZ character sequence.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different RAR parser implementations.",0.99636,{"cveId":347,"description":348,"publishedDate":323,"cvssScore":324,"cvssVersion":325,"severity":326,"isKev":327,"epssScore":349},"CVE-2012-1442","The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, F-Secure Anti-Virus 9.0.16160.0, Sophos Anti-Virus 4.61.0, Antiy Labs AVL SDK 2.0.3.7, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified class field. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.",0.98917,{"cveId":351,"description":352,"publishedDate":353,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":354},"CVE-2022-3236","A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.","2022-09-23",0.98878,{"cveId":356,"description":357,"publishedDate":323,"cvssScore":324,"cvssVersion":325,"severity":326,"isKev":327,"epssScore":358},"CVE-2012-1453","The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee Gateway (formerly Webwasher) 2010.1C, Emsisoft Anti-Malware 5.1.0.1, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, Antimalware Engine 1.1.6402.0 in Microsoft Security Essentials 2.0, Rising Antivirus 22.83.00.03, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via a CAB file with a modified coffFiles field.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different CAB parser implementations.",0.9771,{"cveId":360,"description":361,"publishedDate":362,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":363},"CVE-2020-25223","A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11","2020-09-25",0.96753,[365,373,381,385,389,393,396],{"cveId":366,"description":367,"publishedDate":145,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":368,"cisaVulnName":369,"cisaDateAdded":370,"cisaShortDescription":371,"cisaRequiredAction":372},"CVE-2020-29574","An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.",0.04696,"CyberoamOS (CROS) SQL Injection Vulnerability","2025-02-06","CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":374,"description":375,"publishedDate":376,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":377,"cisaVulnName":378,"cisaDateAdded":370,"cisaShortDescription":379,"cisaRequiredAction":380},"CVE-2020-15069","Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP\u002FS Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.","2020-06-29",0.10674,"Sophos XG Firewall Buffer Overflow Vulnerability","Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the \"HTTP\u002FS bookmark\" feature.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":313,"description":314,"publishedDate":315,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":319,"cisaVulnName":382,"cisaDateAdded":383,"cisaShortDescription":384,"cisaRequiredAction":380},"Sophos Web Appliance Command Injection Vulnerability","2023-11-16","Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.",{"cveId":351,"description":352,"publishedDate":353,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":354,"cisaVulnName":386,"cisaDateAdded":353,"cisaShortDescription":387,"cisaRequiredAction":388},"Sophos Firewall Code Injection Vulnerability","A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.","Apply updates per vendor instructions.",{"cveId":334,"description":335,"publishedDate":336,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":337,"cisaVulnName":390,"cisaDateAdded":391,"cisaShortDescription":392,"cisaRequiredAction":388},"Sophos Firewall Authentication Bypass Vulnerability","2022-03-31","An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.",{"cveId":360,"description":361,"publishedDate":362,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":363,"cisaVulnName":394,"cisaDateAdded":336,"cisaShortDescription":395,"cisaRequiredAction":388},"Sophos SG UTM Remote Code Execution Vulnerability","A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM.",{"cveId":397,"description":398,"publishedDate":399,"cvssScore":316,"cvssVersion":317,"severity":318,"isKev":4,"epssScore":400,"cisaVulnName":401,"cisaDateAdded":402,"cisaShortDescription":403,"cisaRequiredAction":388},"CVE-2020-12271","A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either the administration (HTTPS) service or the User Portal exposed on the WAN zone. A successful attack may have caused remote code execution that exfiltrated usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords)","2020-04-27",0.42434,"Sophos SFOS SQL Injection Vulnerability","2021-11-03","Sophos Firewall operating system (SFOS) firmware contains a SQL injection vulnerability when configured with either the administration (HTTPS) service or the User Portal is exposed on the WAN zone. Successful exploitation may cause remote code execution to exfiltrate usernames and hashed passwords for the local device admin(s), portal admins, and user accounts used for remote access (but not external Active Directory or LDAP passwords).",[405,406,407,408,409,410,411,412,413,414],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":28,"last_cve_update":29},{"id":31,"product_name":32,"version_count":21,"cve_count":33,"kev_count":34,"last_cve_update":35},{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":21,"last_cve_update":41},{"id":43,"product_name":44,"version_count":45,"cve_count":46,"kev_count":28,"last_cve_update":35},{"id":48,"product_name":49,"version_count":50,"cve_count":46,"kev_count":21,"last_cve_update":51},{"id":53,"product_name":54,"version_count":28,"cve_count":46,"kev_count":21,"last_cve_update":55},{"id":57,"product_name":58,"version_count":59,"cve_count":60,"kev_count":21,"last_cve_update":61},{"id":63,"product_name":64,"version_count":28,"cve_count":60,"kev_count":21,"last_cve_update":65},{"id":67,"product_name":68,"version_count":46,"cve_count":60,"kev_count":34,"last_cve_update":69},{"title":416,"metaDescription":417,"keywords":418,"structuredData":419},"Sophos - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sophos covering 74 products with 162 tracked vulnerabilities including 7 critical and 0 high-severity issues and 7 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sophos vulnerabilities, Sophos security, Sophos CVE, Sophos threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sophos KEV, Sophos exploited vulnerabilities",{"@context":420,"@type":421,"name":422,"description":417,"url":423},"https:\u002F\u002Fschema.org","Organization","Sophos","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsophos",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":425,"apiVersion":426},"2026-10-17T12:13:06.147Z","3.0"]