CVE-2023-33336

all versions

Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code

4.8MEDIUM

CVE-2023-1671

< 4.3.10.4

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows

9.8CRITICAL

CVE-2022-4934

< 4.3.10.4

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows adm

7.2HIGH

CVE-2020-36692

< 4.3.10.4

A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution o

6.5MEDIUM

CVE-2017-9523

<= 4.3.1.4

The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.

6.1MEDIUM

CVE-2017-6412

<= 4.3.1.1

In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.

8.1HIGH

CVE-2017-6184

<= 4.3.1.1

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerab

4.7MEDIUM

CVE-2017-6183

<= 4.3.1.1

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active

7.2HIGH

CVE-2017-6182

<= 4.3.1.1

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerab

9.8CRITICAL

CVE-2016-9554

all versions

The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerab

7.2HIGH

CVE-2016-9553

all versions

The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web adminis

7.2HIGH

CVE-2014-2850

all versions

The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execu

CVE-2014-2849

all versions

The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change

CVE-2013-2643

all versions

Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitr

CVE-2013-2642

all versions

Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the clie

CVE-2013-2641

all versions

Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary

CVE-2013-4984

<= 3.7.9

The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows