WA
Product
Web Appliance
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch
Add Web Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6412 | 8.1 | Mar 30 | In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310 Affected: through 4.3.1.1 |
| CVE-2022-4934 | 7.2 | Apr 4 | A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code Affected: before 4.3.10.4 |
| CVE-2017-6183 | 7.2 | Mar 30 | In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote… Affected: through 4.3.1.1 |
| CVE-2016-9554 | 7.2 | Jan 28 | The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface Affected: 4.2.1.3 |
| CVE-2016-9553 | 7.2 | Jan 28 | The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative interface Affected: 4.2.1.3 |
Showing 5