Login Request a demo
EP
Product
Endpoint Protection
by Sophos · last CVE Feb 24, 2020
3
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Endpoint Protection to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-9363
7.8
1%
Feb 24
The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive
Affected: before 2020-01-14
CVE-2018-9233
7.8
2%
Apr 5
Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers…
Affected: 10.7
CVE-2018-4863
5.5
1%
Apr 5
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Sophos…
Affected: 10.7
Showing 3