Unified Threat Management Software vulnerabilities

Product

Unified Threat Management Software

by Sophos · last CVE Oct 3, 2016

CVEs

On KEV

8.1

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 4Low 0

Severity

Exploitation

Watch

Add Unified Threat Management Software to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-0777	6.5	63%	Jan 14	The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by… Affected: 9.318; 9.353
CVE-2016-2046	6.1	3%	Feb 17	Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter Affected: through 9.351
CVE-2016-7442	4.4	1%	Oct 3	The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the… Affected: through 9.405-5
CVE-2016-7397	4.4	1%	Oct 3	The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the… Affected: through 9.405-5