FI
Network Security
Firewall
On CISA KEVExploited in the wildRansomware-linked
19
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 9Medium 2Low 0
Watch
Add Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3236 In wildKEV | 9.8 | Sep 23 | Sophos Firewall Code Injection Vulnerability Affected: through 18.5 MR4; through 19.0 MR1 |
| CVE-2022-1040 In wildKEV | 9.8 | Mar 25 | Sophos Firewall Authentication Bypass Vulnerability Affected: through 18.5 MR3 |
| CVE-2020-12271 RansomwareIn wildKEV | 9.8 | Apr 27 | Sophos SFOS SQL Injection Vulnerability Affected: 17.0; 17.1; 17.5; 18.0 |
| CVE-2025-7624 | 9.8 | Jul 21 | An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining… Affected: before 21.0 MR2 (21.0.2) |
| CVE-2025-6704 | 9.8 | Jul 21 | An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth remote code… Affected: before 21.0 MR2 (21.0.2) |
| CVE-2024-12728 | 9.8 | Dec 19 | A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3) Affected: before 20.0 MR3 (20.0.3) |
| CVE-2024-12727 | 9.8 | Dec 19 | A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can… Affected: before 21.0 MR1 (21.0.1) |
| CVE-2020-11503 | 9.8 | Jun 18 | A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely Affected: before 17.5; 17.5; 17.5; 17.5; 17.5; 17.5; +7 more |
Showing 8