Known vulnerabilities in Sophos Firewall - page 2

Vendor: Sophos
Software CPE: cpe:2.3:h:sophos:xg_firewall:*:*:*:*:*:*:*:*
Total vulnerabilities: 29
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sophos Firewall Sophos Firewall is affected by 29 known vulnerabilities: 8 critical, 6 high, 6 medium, 9 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103715 - Memory corruption
CVE-2020-15069
CWE-119 Critical
No
Exploited
17.5.13 07.02.2025 SB2020062921
#VU61634 - Improper input validation
CVE-2022-1040
CWE-20 Critical
Available
Exploited
18.5.4, 19.0.0 28.03.2022 SB2022032801
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686
CWE-345 Low
Available
No
17.5.15, 18.0.4 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685
CWE-327 Low
Available
No
17.5.15, 18.0.4 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684
CWE-345 Low
Available
No
17.5.15, 18.0.4 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more
#VU45884 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-17352
CWE-78 High
No
No
17.5.13, 18.0.3 07.08.2020 SB2020080712
#VU45887 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-15504
CWE-89 High
No
No
17.5 MR13, 18 MR-1-396 10.07.2020 SB2020071022
#VU27326 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-12271
CWE-89 Critical
No
Exploited
- 26.04.2020 SB2020042601
#VU9953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18014
CWE-79 Low
No
No
- 10.01.2018 SB2018010306


Showing elements 21 - 40 out of 29