Sophos Sophos Firewall
21 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-13973 | < 21.0 MR1 (21.0.1) | A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to adminis | HIGH 7.2 | 12 % | ||
| CVE-2024-13974 | < 21.0 MR1 (21.0.1) | A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers contro | HIGH 8.1 | 9.1 % | ||
| CVE-2025-7382 | < 21.0 MR2 (21.0.2) | A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achiev | HIGH 8.8 | 4.9 % | ||
| CVE-2025-7624 | < 21.0 MR2 (21.0.2) | An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to r | CRITICAL 9.8 | 11 % | ||
| CVE-2025-6704 | < 21.0 MR2 (21.0.2) | An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) ca | CRITICAL 9.8 | 12 % | ||
| CVE-2024-12729 | < 21.0 MR1 (21.0.1) | A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older tha | HIGH 8.8 | 1.3 % | ||
| CVE-2024-12728 | < 20.0 MR3 (20.0.3) | A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3) | CRITICAL 9.8 | 0.9 % | ||
| CVE-2024-12727 | < 21.0 MR1 (21.0.1) | A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows acces | CRITICAL 9.8 | 1.4 % | ||
| CVE-2023-5552 | fixed in 19.5.4, 20.0.0 | A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Soph | HIGH 7.5 | 0.6 % | ||
| CVE-2022-3713 | unspecified – < 19.5 GA ; unspecified – < 19.0 MR2 ; unspecified – < 18.5 MR5 | A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than versi | HIGH 8.8 | 0.7 % | ||
| CVE-2022-3711 | unspecified – < 19.5 GA ; unspecified – < 19.0 MR2 | A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of S | MEDIUM 4.3 | 0.8 % | ||
| CVE-2022-3710 | unspecified – < 19.5 GA ; unspecified – < 19.0 MR2 | A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API contro | LOW 2.7 | 0.8 % | ||
| CVE-2022-3709 | unspecified – < 19.5 GA ; unspecified – < 19.0 MR2 ; unspecified – < 18.5 MR5 | A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases | HIGH 8.4 | 0.9 % | ||
| CVE-2022-3696 | unspecified – < 19.5 GA ; unspecified – < 19.0 MR2 | A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA. | HIGH 7.2 | 1.2 % | ||
| CVE-2022-3226 | unspecified – < 19.5 GA ; unspecified – < 19.0 MR2 ; unspecified – < 18.5 MR5 | An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewall releases older than | HIGH 7.2 | 1.8 % | ||
| CVE-2022-3236 | unspecified – 18.5 MR4 ; unspecified – 19.0 MR1 | A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 | CRITICAL 9.8 | 99 % | KEV | |
| CVE-2022-1807 | unspecified – < 18.5 MR4 ; unspecified – < 19.0 MR1 | Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18. | HIGH 7.2 | 1.1 % | ||
| CVE-2021-25268 | unspecified – < 19.0 GA | Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than vers | HIGH 8.4 | 0.9 % | ||
| CVE-2021-25267 | unspecified – < 19.0 GA | Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 | HIGH 8.4 | 1.1 % | ||
| CVE-2022-0331 | unspecified – 18.5 MR2 | An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Fir | MEDIUM 5.3 | 1.5 % | ||
| CVE-2022-1040 | unspecified – 18.5 MR3 | An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v | CRITICAL 9.8 | 100 % | KEV |