CVE-2022-3980

🗓️ 16 Nov 2022 00:00:00Reported by SophosType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 101 Views

An XEE vulnerability in Sophos Mobile on-premises (v5.0.0 - v9.7.4) allows SSRF & potential code execution

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-3980	17 Nov 202215:52	–	circl
CNNVD	Sophos Mobile 代码问题漏洞	16 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-3980	16 Nov 202200:00	–	cvelist
Nuclei	Sophos Mobile managed on-premises - XML External Entity Injection	28 Jun 202615:08	–	nuclei
NVD	CVE-2022-3980	16 Nov 202213:15	–	nvd
OSV	CVE-2022-3980	16 Nov 202213:15	–	osv
Prion	Server side request forgery (ssrf)	16 Nov 202213:15	–	prion
Positive Technologies	PT-2022-24997 · Sophos · Sophos Mobile	16 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3980	6 Feb 202500:45	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2022-3980	13 Nov 202300:00	–	vulncheck_kev

NVD

Node

sophos mobileRange5.0.0–9.7.5

[
  {
    "vendor": "Sophos",
    "product": "Sophos Mobile managed on-premises",
    "versions": [
      {
        "version": "5.0.0",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "9.7.4",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]