Advisories · Technology

Sophos Firewall.

Every CVE that names Sophos Firewall among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-13973 CVE record

CVSS 6.8 Medium

SQL injection in Sophos Firewall
- Sophos Firewall
- SQL injection
Not analysed yet 21 Jul 2025
CVE-2024-13974 CVE record

CVSS 8.1 High

Sophos Firewall: A business logic vulnerability in the Up2Date component of Sophos Firewall older than…
- Sophos Firewall
- CWE-807
Not analysed yet 21 Jul 2025
CVE-2025-7382 CVE record

CVSS 8.8 High

OS command injection in Sophos Firewall
- Sophos Firewall
- Command injection
Not analysed yet 21 Jul 2025
CVE-2025-7624 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Sophos Firewall
- Sophos Firewall
- SQL injection
Not analysed yet 21 Jul 2025
CVE-2025-6704 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in Sophos Firewall
- Sophos Firewall
- Command injection
Not analysed yet 21 Jul 2025
CVE-2024-12729 CVE record

CVSS 8.8 High

Code injection in Sophos Firewall
- Sophos Firewall
- Code injection
Not analysed yet 19 Dec 2024
CVE-2024-12728 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Weak credentials in Sophos Firewall
- Sophos Firewall
- Hard-coded credentials
Not analysed yet 19 Dec 2024
CVE-2024-12727 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SQL injection in Sophos Firewall
- Sophos Firewall
- SQL injection
Not analysed yet 19 Dec 2024
CVE-2023-5552 CVE record

CVSS 7.1 High

Information disclosure in Sophos Firewall
- Sophos Firewall
- Information disclosure
Not analysed yet 17 Oct 2023
CVE-2022-3713 CVE record

CVSS 8.8 High

Code injection in Sophos Firewall
- Sophos Firewall
- Code injection
Not analysed yet 1 Dec 2022
CVE-2022-3711 CVE record

CVSS 4.3 Medium

SQL injection in Sophos Firewall
- Sophos Firewall
- SQL injection
Not analysed yet 1 Dec 2022
CVE-2022-3710 CVE record

CVSS 2.7 Low

SQL injection in Sophos Firewall
- Sophos Firewall
- SQL injection
Not analysed yet 1 Dec 2022
CVE-2022-3709 CVE record

CVSS 6.8 Medium

Cross-site scripting in Sophos Firewall
- Sophos Firewall
- Cross-site scripting (XSS)
Not analysed yet 1 Dec 2022
CVE-2022-3696 CVE record

CVSS 7.2 High

Code injection in Sophos Firewall
- Sophos Firewall
- Code injection
Not analysed yet 1 Dec 2022
CVE-2022-3226 CVE record

CVSS 7.2 High

OS command injection in Sophos Firewall
- Sophos Firewall
- Command injection
Not analysed yet 1 Dec 2022
CVE-2022-3236 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Code injection in Sophos Firewall
- Sophos Firewall
- Code injection
Not analysed yet 23 Sept 2022
CVE-2022-1807 CVE record

CVSS 7.2 High

SQL injection in Sophos Firewall
- Sophos Firewall
- SQL injection
Not analysed yet 7 Sept 2022
CVE-2021-25268 CVE record

CVSS 8.4 High

Sophos Firewall: Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos…
- Sophos Firewall
Not analysed yet 5 May 2022
CVE-2021-25267 CVE record

CVSS 6.8 Medium

Sophos Firewall: Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to…
- Sophos Firewall
Not analysed yet 5 May 2022
CVE-2022-0331 CVE record

CVSS 5.3 Medium

Sophos Firewall: An information disclosure vulnerability in Webadmin allows an unauthenticated remote…
- Sophos Firewall
Not analysed yet 29 Mar 2022
CVE-2022-1040 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Sophos Firewall: An authentication bypass vulnerability in the User Portal and Webadmin allows a remote…
- Sophos Firewall
Not analysed yet 25 Mar 2022