Sophos Connect vulnerabilities
4 vulnerabilities
Known vulnerabilities in Sophos Connect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25265sophosconnect+1
EPSS score2.05%
A malicious website could execute code remotely in Sophos Connect Client before version 2.1.CVE-2022-48310sophosconnect+1EPSS score0.13%
An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.CVE-2022-48309sophosconnect+1EPSS score0.34%
A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.CVE-2022-4901sophosconnect+1EPSS score0.34%
Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manually loaded by the victim.