Product by Sophos

Sophos Web Appliance

17 known vulnerabilities in Sophos Web Appliance (Sophos), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Sophos Web Appliance (Sophos)

Critical	CVE-2023-1671	Sophos Web Appliance Command Injection Vulnerability In CISA KEValso in 1 other product	9.8	04.04.2023
Critical	CVE-2017-6182	Sophos Web Appliance: Command Injection	9.8	30.03.2017
High	CVE-2016-9554	Sophos Web Appliance: Command Injection	7.2	28.01.2017
High	CVE-2017-6412	Sophos Web Appliance: Session Fixation	8.1	30.03.2017
High	CVE-2016-9553	Sophos Web Appliance: Command Injection	7.2	28.01.2017
High	CVE-2017-6183	Sophos Web Appliance: Command Injection	7.2	30.03.2017
High	CVE-2022-4934	Sophos Web Appliance: Command Injection also in 1 other product	7.2	04.04.2023
Medium	CVE-2017-6184	Sophos Web Appliance: Command Injection	4.7	30.03.2017
Not rated	CVE-2013-2641	Sophos Web Appliance: Path Traversal also in 1 other product	—	18.03.2014
Not rated	CVE-2014-2849	Sophos Web Appliance: security vulnerability also in 1 other product	—	11.04.2014
Not rated	CVE-2014-2850	Sophos Web Appliance: security vulnerability also in 1 other product	—	11.04.2014
Not rated	CVE-2013-4984	Sophos Web Appliance: Privilege Escalation	—	10.09.2013
Not rated	CVE-2013-2642	Sophos Web Appliance: security vulnerability also in 1 other product	—	18.03.2014
Not rated	CVE-2013-2643	Sophos Web Appliance: Cross-Site Scripting (XSS) also in 1 other product	—	18.03.2014
Medium	CVE-2017-9523	Sophos Web Appliance: Cross-Site Scripting (XSS)	6.1	09.06.2017
Medium	CVE-2020-36692	Sophos Web Appliance: Cross-Site Scripting (XSS) also in 1 other product	6.5	04.04.2023
Medium	CVE-2023-33336	Sophos Web Appliance: Cross-Site Scripting (XSS)	4.8	30.06.2023