Sophos
Sophos Connect: vulnerabilidades y CVE
Sophos Connect tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-4901 | Media (6.1) | 0.34% | — | 1 mar 2023 | Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manually loaded by the victim. |
| CVE-2022-48310 | Media (5.5) | 0.13% | — | 1 mar 2023 | An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90. |
| CVE-2022-48309 | Media (4.3) | 0.34% | — | 1 mar 2023 | A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90. |
| CVE-2021-25265 | Alta (8.8) | 1.8% | — | 22 mar 2021 | A malicious website could execute code remotely in Sophos Connect Client before version 2.1. |
Otros productos de Sophos
Sophos Anti-virus · 36WEB Appliance · 18Anti-virus · 12Firewall Firmware · 10Unified Threat Management Software · 9Sophos Puremessage Anti-virus · 9XG Firewall Firmware · 9Sfos · 8Safeguard Easy Device Encryption Client · 8Sophos Small Business Suite · 8Safeguard Enterprise Client · 7Safeguard LAN Crypt Client · 7