FI
Network Security
Firewall
On CISA KEVExploited in the wildRansomware-linked
19
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 9Medium 2Low 0
Watch
Add Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-7382 | 8.8 | Jul 21 | A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achieving pre-auth code execution on High… Affected: before 21.0 MR2 (21.0.2) |
| CVE-2024-12729 | 8.8 | Dec 19 | A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1) Affected: before 21.0 MR1 (21.0.1) |
| CVE-2018-16117 | 8.8 | Jun 20 | A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary OS commands via… Affected: through 17.0; 17.1; 17.1 |
| CVE-2018-16116 | 8.8 | Jun 20 | SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQL commands via the… Affected: 17.0.8 |
| CVE-2024-13974 | 8.1 | Jul 21 | A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controlling the firewall’s DNS environment to… Affected: before 21.0 MR1 (21.0.1) |
| CVE-2018-16118 | 8.1 | Jun 20 | A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS… Affected: through 16.0; 16.5; 17.0; 17.0.8; 17.1 |
| CVE-2023-5552 | 7.5 | Oct 18 | A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3)… Affected: through 19.5.3 |
| CVE-2024-13973 | 7.2 | Jul 21 | A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code… Affected: before 21.0 MR1 (21.0.1) |
| CVE-2022-1807 | 7.2 | Sep 7 | Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1 Affected: before 18.5; 18.5; 18.5; 18.5; 18.5; 18.5; +1 more |
Showing 9