WA
Product
Web Appliance
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 4Low 0
Watch
Add Web Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9523 | 6.1 | Jun 9 | The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342 Affected: through 4.3.1.4 |
| CVE-2020-36692 | 5.4 | Apr 4 | A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a… Affected: before 4.3.10.4 |
| CVE-2023-33336 | 4.8 | Jun 30 | Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes Affected: 4.3.9.1 |
| CVE-2017-6184 | 4.7 | Mar 30 | In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token… Affected: through 4.3.1.1 |
Showing 4