Login Request a demo
XF
Product
XG Firewall Firmware
by Sophos · last CVE Dec 1, 2022
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 5Medium 1Low 1
Severity
All severities9Critical2High5Medium1Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add XG Firewall Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3710
2.7
1%
Dec 1
A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older…
Affected: before 19.5
Showing 1