UT
Product
Unified Threat Management
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Unified Threat Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25223 In wildKEV | 9.8 | Sep 25 | Sophos SG UTM Remote Code Execution Vulnerability Affected: before 9.511; 9.600 before 9.607; 9.700 before 9.705; 9.511; 9.607; 9.705 |
| CVE-2022-0386 | 8.8 | Mar 22 | A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710 Affected: before 9.710 |
| CVE-2022-0652 | 7.8 | Mar 22 | Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions Affected: before 9.710 |
| CVE-2021-25273 | 4.8 | Jul 29 | Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706 Affected: before 9.706 |
| CVE-2014-2537 | – | Mar 18 | Memory leak in the TCP stack in the kernel in Sophos UTM before 9.109 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors Affected: 110; 120; 220; 320; 425; 525; +1 more |
| CVE-2012-3238 | – | Jul 9 | Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script… Affected: 110; 120; 220; 320; 425; 525; +1 more |
Showing 6