Sophos vulnerabilities, page 2
172 vulnerabilities
Known vulnerabilities in Sophos products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 88 products.
CVE-2013-4984sophosweb_appliance
EPSS score8.13%
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.CVE-2013-5932sophosunified_threat_management_softwareEPSS score5.41%
Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and attack vectors.CVE-2021-36808sophossophos_secure_workspace+1EPSS score0.26%
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.CVE-2021-36807sophossg utm+1EPSS score1.50%
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.CVE-2021-36806sophosemail_appliance+1EPSS score0.43%
A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on
Sophos Email Appliance
older than version 4.5.3.4.CVE-2021-36809sophosssl_vpn_clientEPSS score0.23%
A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss, in all versions of Sophos SSL VPN client.CVE-2021-25264sophoshome+4EPSS score0.31%
In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privileges.CVE-2021-25265sophosconnect+1EPSS score2.05%
A malicious website could execute code remotely in Sophos Connect Client before version 2.1.CVE-2021-25270sophoshitmanpro.alertEPSS score0.26%
A local attacker could execute arbitrary code with administrator privileges in HitmanPro.Alert before version Build 901.CVE-2021-25269sophosexploit_prevention+5EPSS score0.25%
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.CVE-2021-25266sophosauthenticator+3EPSS score0.23%
An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.CVE-2021-25267sophosfirewall+1EPSS score1.09%
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA.CVE-2021-25271sophoshitmanproEPSS score0.23%
A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318.CVE-2021-25268sophosfirewall+1EPSS score0.91%
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA.CVE-2021-25273sophossophos utm+1EPSS score0.83%
Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.CVE-2015-7547canonicalubuntu_linux+45EPSS score90.99%
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.CVE-2015-8605canonicalubuntu_linux+23EPSS score82.73%
ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash) via an invalid length field in a UDP IPv4 packet.CVE-2007-4512sophosanti-virusEPSS score4.76%
Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.CVE-2007-4577sophosanti-virus+2EPSS score5.53%
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").CVE-2007-4578sophosanti-virus+2EPSS score7.30%
Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.