Sophos Vulnerabilidad

Cronología

Escribe

Producto

Sophos Anti-Virus50
Sophos Web Appliance20
Sophos Firewall13
Sophos UTM8
Sophos SafeGuard Enterprise8

Contramedidas

Official Fix118
Temporary Fix0
Workaround2
Unavailable5
Not Defined35

Explotabilidad

High7
Functional0
Proof-of-Concept62
Unproven5
Not Defined86

Vector de acceso

Not Defined0
Physical1
Local32
Adjacent2
Network125

Autenticación

Not Defined0
High13
Low48
None99

La interacción del usuario

Not Defined0
Required26
None134

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤45
≤518
≤640
≤723
≤846
≤917
≤109

CVSSv3 Temp

≤10
≤20
≤32
≤411
≤527
≤630
≤745
≤821
≤919
≤105

VulDB

≤10
≤21
≤35
≤411
≤520
≤642
≤720
≤844
≤99
≤108

NVD

≤10
≤20
≤30
≤40
≤55
≤66
≤710
≤819
≤911
≤108

CNA

≤10
≤20
≤31
≤43
≤54
≤62
≤74
≤85
≤95
≤105

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤100

Explotar día 0

<1k30
<2k44
<5k35
<10k12
<25k8
<50k30
<100k1
≥100k0

Explotar hoy

<1k153
<2k3
<5k1
<10k2
<25k1
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (58): Anti-Virus (50), Antivirus (1), Authenticator (1), Capsule8 Console (1), Central Endpoint (1), Cloud Optix (1), Connect (3), Connect Client (1), Control (1), Cyberoam CR500iNG-XP (1), Cyberoam Firewall (2), Cyberoam OS (1), Cyberoam UTM (1), Cyberoam UTM CR25iNG (1), Disk Encryption (1), EAS Proxy (1), ES4000 (1), Email Appliance (1), Endpoint Protection (3), Endpoint Security (1), Exploit Prevention (1), Firewall (13), HitmanPro (1), HitmanPro.Alert (4), Home (1), Home Endpoint (1), IPSec Client (1), Intercept X Advanced (1), Intercept X Advanced for Server (1), Intercept X Endpoint (2), Intercept X for Mobile (1), Intercept X for Server (1), Mobile (1), Mobile Managed On-Premises (1), PureMessage for Microsoft Exchange (3), PureMessage for UNIX (1), SFOS (2), SG UTM (2), SSL VPN Client (1), SafeGuard Easy (7), SafeGuard Enterprise (8), SafeGuard Enterprise Device Encryption (1), SafeGuard LAN Crypt (7), SafeGuard PrivateCrypto (1), Secure Email App (1), Secure Web Gateway. (1), Secure Web Gateway Server (1), Secure Workspace (1), SurfRight HitmanPro (3), Tester Tool (2), Threat Engine Detection (1), UTM (8), Unified Threat Management (1), Web Appliance (20), Web Appliance Remote (1), Web Protection Appliance (2), XG Firewall (7), iView (1)

Link to Vendor Website: https://www.sophos.com/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-11-305.05.0Sophos Email Appliance cross site scriptingDesconocidoNot DefinedOfficial Fix0.000460.00CVE-2021-36806
2023-10-186.06.0Sophos Firewall Secure PDF eXchange divulgación de informaciónFirewall SoftwareNot DefinedNot Defined0.000870.04CVE-2023-5552
2023-07-054.84.8Sophos iView cross site scriptingDesconocidoNot DefinedNot Defined0.000460.00CVE-2023-33335
2023-06-304.14.1Sophos Web Appliance Double Quote cross site scriptingDesconocidoNot DefinedNot Defined0.000450.00CVE-2023-33336
2023-04-049.89.6Sophos Web Appliance Warn-proceed escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.967910.03CVE-2023-1671
2023-04-047.27.0Sophos Web Appliance Exception Wizard escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000920.00CVE-2022-4934
2023-04-045.45.3Sophos Web Appliance Report Scheduler cross site scriptingDesconocidoNot DefinedOfficial Fix0.000580.00CVE-2020-36692
2023-03-014.34.2Sophos Connect cross site request forgeryDesconocidoNot DefinedOfficial Fix0.000460.00CVE-2022-48309
2023-03-014.34.3Sophos Connect Local UI cross site scriptingDesconocidoNot DefinedOfficial Fix0.000630.02CVE-2022-4901
2023-03-014.44.3Sophos Connect Technical Support Archives divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.000430.00CVE-2022-48310
2022-12-025.95.8Sophos Firewall Webadmin Import Group Wizard cross site scriptingFirewall SoftwareNot DefinedOfficial Fix0.000890.00CVE-2022-3709
2022-12-028.88.6Sophos Firewall Wifi Controller escalada de privilegiosFirewall SoftwareNot DefinedOfficial Fix0.000650.05CVE-2022-3713
2022-12-024.34.2Sophos Firewall User Portal sql injectionFirewall SoftwareNot DefinedOfficial Fix0.000530.02CVE-2022-3711
2022-12-027.27.0Sophos Firewall Webadmin escalada de privilegiosFirewall SoftwareNot DefinedOfficial Fix0.001050.00CVE-2022-3696
2022-12-027.27.0Sophos Firewall SSL VPN Configuration Upload escalada de privilegiosFirewall SoftwareNot DefinedOfficial Fix0.001180.00CVE-2022-3226
2022-12-022.72.6Sophos Firewall API Controller sql injectionFirewall SoftwareNot DefinedOfficial Fix0.000530.00CVE-2022-3710
2022-11-168.58.5Sophos Mobile Managed On-Premises XML escalada de privilegiosDesconocidoNot DefinedNot Defined0.412830.00CVE-2022-3980
2022-09-238.58.5Sophos Firewall User Portal/Webadmin escalada de privilegiosFirewall SoftwareNot DefinedNot Defined0.127880.03CVE-2022-3236
2022-09-087.27.0Sophos Firewall Webadmin sql injectionFirewall SoftwareNot DefinedOfficial Fix0.001040.00CVE-2022-1807
2022-05-065.45.3Sophos Firewall Webadmin cross site scriptingFirewall SoftwareNot DefinedOfficial Fix0.001040.00CVE-2021-25268
2022-05-064.64.5Sophos Firewall Webadmin cross site scriptingFirewall SoftwareNot DefinedOfficial Fix0.001040.00CVE-2021-25267
2022-04-282.82.8Sophos Authenticator/Intercept X for Mobile TOTP Secret Key escalada de privilegiosAndroid App SoftwareNot DefinedOfficial Fix0.000440.00CVE-2021-25266
2022-03-295.35.3Sophos Firewall Webadmin divulgación de informaciónFirewall SoftwareNot DefinedNot Defined0.001250.00CVE-2022-0331
2022-03-258.58.5Sophos Firewall User Portal/Webadmin autenticación débilFirewall SoftwareNot DefinedNot Defined0.974340.08CVE-2022-1040
2022-03-227.57.4Sophos UTM Mail Manager sql injectionDesconocidoNot DefinedOfficial Fix0.000880.04CVE-2022-0386

135 no se muestran más entradas

Interested in the pricing of exploits?

See the underground prices here!