Known vulnerabilities in Sophos Firewall - page 2

Vendor: Sophos
Software CPE: cpe:2.3:h:sophos:xg_firewall:*:*:*:*:*:*:*:*
Total vulnerabilities: 29
Public exploits: 4
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sophos Firewall Sophos Firewall is affected by 29 known vulnerabilities: 8 critical, 6 high, 6 medium, 9 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-25267
CWE-79 Medium
No
No
18.5.4 03.10.2022 SB2022100315
#VU67804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-25268
CWE-79 Medium
No
No
18.5.4 03.10.2022 SB2022100315
#VU67802 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-1807
CWE-89 Medium
No
No
18.5.4, 19.0.1 03.10.2022 SB2022100315
#VU67624 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-3236
CWE-94 Critical
No
Exploited
17.0.10, 18.5.5, 19.0.2, 19.5.0 24.09.2022 SB2022092401
#VU61634 - Improper input validation
CVE-2022-1040
CWE-20 Critical
Available
Exploited
18.5.4, 19.0.0 28.03.2022 SB2022032801
#VU45884 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-17352
CWE-78 High
No
No
17.5.13, 18.0.3 07.08.2020 SB2020080712
#VU45887 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-15504
CWE-89 High
No
No
17.5 MR13, 18 MR-1-396 10.07.2020 SB2020071022
#VU27326 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-12271
CWE-89 Critical
No
Exploited
- 26.04.2020 SB2020042601
#VU9953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18014
CWE-79 Low
No
No
- 10.01.2018 SB2018010306


Showing elements 21 - 40 out of 29