Product by Sophos

    Sophos Firewall

    21 known vulnerabilities in Sophos Firewall (Sophos), 2 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sophos Firewall (Sophos)
    CriticalCVE-2022-3236

    Sophos Firewall Code Injection Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2022-1040

    Sophos Firewall Authentication Bypass Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2025-6704

    Sophos Firewall: OS Command Injection

    also in 1 other product

    		9.8
    CriticalCVE-2025-7624

    Sophos Firewall: SQL Injection

    also in 1 other product

    		9.8
    HighCVE-2024-13974

    Sophos Firewall: Reliance on Untrusted Inputs in a Security Decision

    also in 1 other product

    		8.1
    HighCVE-2025-7382

    Sophos Firewall: OS Command Injection

    also in 1 other product

    		8.8
    HighCVE-2024-13973

    Sophos Firewall: SQL Injection

    also in 1 other product

    		6.8
    CriticalCVE-2024-12727

    Sophos Firewall: SQL Injection

    also in 1 other product

    		9.8
    HighCVE-2024-12729

    Sophos Firewall: Code Injection

    also in 1 other product

    		8.8
    HighCVE-2022-3226

    Sophos Firewall: OS Command Injection

    also in 1 other product

    		7.2
    CriticalCVE-2024-12728

    Sophos Firewall: Use of Weak Credentials

    also in 1 other product

    		9.8
    HighCVE-2022-3696

    Sophos Firewall: Code Injection

    also in 1 other product

    		7.2
    HighCVE-2022-1807

    Sophos Firewall: Privilege Escalation

    also in 1 other product

    		7.2
    HighCVE-2021-25268

    Sophos Firewall: Cross-Site Scripting (XSS)

    also in 1 other product

    		8.4
    MediumCVE-2022-0331

    Sophos Firewall: Information Disclosure

    also in 1 other product

    		5.3
    HighCVE-2021-25267

    Sophos Firewall: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.8
    HighCVE-2022-3713

    Sophos Firewall: Code Injection

    also in 1 other product

    		8.8
    HighCVE-2022-3709

    Sophos Firewall: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.8
    HighCVE-2023-5552

    Sophos Firewall: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		7.1
    MediumCVE-2022-3711

    Sophos Firewall: SQL Injection

    also in 1 other product

    		4.3
    LowCVE-2022-3710

    Sophos Firewall: SQL Injection

    also in 1 other product

    		2.7

    All products by Sophos