Known vulnerabilities in Cyberoam OS

Vendor: Sophos
Software: Cyberoam OS
Software CPE: cpe:2.3:h:sophos:cros:*:*:*:*:*:*:*:*
Website: https://www.sophos.com/en-us
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cyberoam OS Cyberoam OS is affected by 2 known vulnerabilities: 1 critical, 1 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96702 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-17059		 CWE-78 Critical
No
No
 10.6.6 MR6 02.09.2024 SB2019101636
#VU48933 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-29574		 CWE-89 High
No
Exploited
 10.6.4 GA Hotfix 19, 10.6.4 MR1 Hotfix 20, 10.6.5 GA Hotfix 18, 10.6.5 MR1 Hotfix 17, 10.6.6 GA Hotfix 19, 10.6.6 MR1 Hotfix 16, 10.6.6 MR2 Hotfix 16, 10.6.6 MR3 Hotfix 16, 10.6.6 MR4 Hotfix 13, 10.6.6 MR5 Hotfix 12, 10.6.6 MR6 Hotfix 3 11.12.2020 SB2020121106