Sophos UTM vulnerabilities

3 vulnerabilities

Known vulnerabilities in Sophos UTM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2021-25273sophossophos utm+1
EPSS score
0.83%
Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.7.8CVE-2022-0652sophossophos utm+1
EPSS score
0.19%
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.8.8CVE-2022-0386sophossophos utm+1
EPSS score
1.23%
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.