Known vulnerabilities in Sophos UTM

Known vulnerabilities in Sophos UTM

Vendor: Sophos

Software: Sophos UTM

Software CPE: cpe:2.3:a:sophos:sophos_utm:*:*:*:*:*:*:*:*

Website: https://www.sophos.com/en-us

Total vulnerabilities: 8

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU61628 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-0386	CWE-89	Medium	No	No	9.710	25.03.2022	SB2022032511
#VU61627 - Information Exposure Through Log Files CVE-2022-0652	CWE-532	Low	No	No	9.710	25.03.2022	SB2022032511
#VU49845 - Insufficient Verification of Data Authenticity CVE-2020-25686	CWE-345	Low	Available	No	9.706	20.01.2021	SB2021012070 SB20210120108 SB20210120122 and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-25685	CWE-327	Low	Available	No	9.706	20.01.2021	SB2021012070 SB20210120107 SB20210120122 and 27 more
#VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684	CWE-345	Low	Available	No	9.706	20.01.2021	SB2021012070 SB20210120106 SB20210120122 and 27 more
#VU10852 - Permissions, Privileges, and Access Controls	CWE-264	Low	No	No	-	05.03.2018	SB2018030601
#VU8940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Low	No	No	-	26.10.2017	SB2017102601
#VU8939 - Permissions, Privileges, and Access Controls	CWE-264	Low	No	No	-	26.10.2017	SB2017102601