88 matches found
Sophos UTM Frontend Component Information Disclosure Vulnerability
Sophos UTM aka Astaro Security Gateway is a suite of unified threat management appliances from Sophos UK. The appliance provides gateway security protection and endpoint security protection. An information disclosure vulnerability exists in the Frontend component of Sophos UTM using firmware...
CVE-2016-7442
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in "system settings / scan settings / anti spam" configuration tab...
CVE-2016-7397
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
CVE-2016-7397
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
Design/Logic Flaw
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in "system settings / scan settings / anti spam" configuration tab...
Design/Logic Flaw
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
CVE-2016-7442
The CVE-2016-7442 entry concerns Sophos UTM, specifically the Frontend component. Firmware 9.405-5 and earlier expose an information-disclosure vulnerability by allowing local administrators to read the password value from the proxy user settings in System Settings / Scan Settings / Anti Spam. Af...
CVE-2016-7397
The CVE-2016-7397 vulnerability affects the Sophos UTM Frontend component (firmware 9.405-5 and earlier). A local administrator can disclose sensitive password information by reading the value field of the SMTP user settings in the Notifications configuration tab. Public disclosures and multiple ...
CVE-2016-7397
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
Sophos UTM 9.405-5 / 9.404-5 Information Disclosure Vulnerability
Sophos UTM versions 9.405-5 and 9.404-5 suffer from information disclosure vulnerabilities. Product: Sophos UTM Vendor: Sophos ltd. Internal reference: ? Bug ID Vulnerability type: Information Disclosure Vulnerable version: 9.405-5, 9.404-5 and possible other versions affected not tested Vulnerab...
Sophos UTM 9.405-5 / 9.404-5 Information Disclosure
Product: Sophos UTM Vendor: Sophos ltd. Internal reference: ? Bug ID Vulnerability type: Information Disclosure Vulnerable version: 9.405-5, 9.404-5 and possible other versions affected not tested Vulnerable component: Frontend Report confidence: yes Solution status: Not fixed by Vendor, no furth...
Sophos UTM URL Reflected XSS Vulnerability
Sophos UTM is prone to a reflected cross-site scripting XSS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Sophos UTM 'lang' Parameter XSS Vulnerability
Sophos UTM is prone to a cross-site scripting XSS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
A concrete XSS vulnerability in Sophos UTM 9 UserPortal: the lang parameter is not properly sanitized, enabling remote injection of arbitrary script/HTML. Affected: Sophos UTM 9 prior to 9.353 (per CVE-2016-2046). Exploitation involves crafting a link the user visits (user interaction required pe...
Sophos UTM 9 Cross Site Scripting
----------- Vendor: ----------- Sophos https://www.sophos.com ----------------------------------------- Affected Products/Versions: ----------------------------------------- Product: Sophos UTM 9 Version: 9.350-12 with pattern version 92405 potentially lower ---------------- Description:...