Login Request a demo
XF
Product
XG Firewall Firmware
by Sophos · last CVE Dec 1, 2022
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 5Medium 1Low 1
Severity
All severities9Critical2High5Medium1Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add XG Firewall Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15069
In wildKEV
9.8
11%
Jun 29
Sophos XG Firewall Buffer Overflow Vulnerability
Affected: 17.0 before 17.5; 17.5; 17.5; 17.5; 17.5; 17.5; +7 more
CVE-2020-15504
9.8
2%
Jul 10
A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0 MR1 and older potentially allows an attacker to run arbitrary code remotely
Affected: 17.0 through 17.5; 17.5; 17.5; 17.5; 17.5; 17.5; +8 more
CVE-2022-3713
8.8
1%
Dec 1
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
CVE-2020-17352
8.8
4%
Aug 7
Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code
Affected: 17.5; 17.5; 17.5; 17.5; 17.5; 17.5; +8 more
CVE-2022-3709
8.4
1%
Dec 1
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
CVE-2022-3696
7.2
1%
Dec 1
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
CVE-2022-3226
7.2
2%
Dec 1
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than version 19.5 GA
Affected: through 19.0
CVE-2022-3711
4.3
1%
Dec 1
A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than…
Affected: through 19.0
CVE-2022-3710
2.7
1%
Dec 1
A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older…
Affected: before 19.5
Showing 9