Sophos Sophos Utm
3 CVEs affecting Sophos Sophos Utm. Latest disclosed: 2022-03-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0386 | High | 8.8 | 2022-03-22 | A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710. |
CVE-2021-25273 | Medium | 4.8 | 2021-07-29 | Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706. |
CVE-2022-0652 | Low | 3.3 | 2022-03-22 | Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt o… |