426 matches found
CVE-2016-7397
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
CVE-2016-7397
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
Design/Logic Flaw
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in "system settings / scan settings / anti spam" configuration tab...
Design/Logic Flaw
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
CVE-2016-7442
The CVE-2016-7442 entry concerns Sophos UTM, specifically the Frontend component. Firmware 9.405-5 and earlier expose an information-disclosure vulnerability by allowing local administrators to read the password value from the proxy user settings in System Settings / Scan Settings / Anti Spam. Af...
CVE-2016-7397
The CVE-2016-7397 vulnerability affects the Sophos UTM Frontend component (firmware 9.405-5 and earlier). A local administrator can disclose sensitive password information by reading the value field of the SMTP user settings in the Notifications configuration tab. Public disclosures and multiple ...
CVE-2016-7397
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab...
Sophos UTM 9.405-5 / 9.404-5 Information Disclosure Vulnerability
Sophos UTM versions 9.405-5 and 9.404-5 suffer from information disclosure vulnerabilities. Product: Sophos UTM Vendor: Sophos ltd. Internal reference: ? Bug ID Vulnerability type: Information Disclosure Vulnerable version: 9.405-5, 9.404-5 and possible other versions affected not tested Vulnerab...
Sophos UTM 9.405-5 / 9.404-5 Information Disclosure
Product: Sophos UTM Vendor: Sophos ltd. Internal reference: ? Bug ID Vulnerability type: Information Disclosure Vulnerable version: 9.405-5, 9.404-5 and possible other versions affected not tested Vulnerable component: Frontend Report confidence: yes Solution status: Not fixed by Vendor, no furth...
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CVE-2016-3968
CVE-2016-3968 affects Sophos Cyberoam CR100iNG UTM (FW 10.6.3 MR-1 build 503) and CR35iNG UTM (FW 10.6.2 MR-1 build 383, and FW 10.6.2 build 378). The vulnerability is cross-site scripting (XSS) via web parameters in LiveConnections.jsp and LiveConnectionDetail.jsp (specifically ipFamily in LiveC...
Fireware XTM Web UI Open Redirect
================================================================ Fireware XTM Web UI - Open Redirect ================================================================ Information -------------------- Name: Fireware XTM Web UI - Open Redirect Affected Software : Fireware XTM Web UI Affected Version...
Sophos UTM URL Reflected XSS Vulnerability
Sophos UTM is prone to a reflected cross-site scripting XSS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Sophos UTM 525 Full Guard Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2016-009 Product: Sophos UTM 525 Full Guard Vendor: Sophos Affected Versions: 9.352-6, 94988 Tested Versions: 9.352-6, 94988 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Vendor...
app.utm.utoronto.ca XSS vulnerability
Vulnerable URL: https://app.utm.utoronto.ca/utmsubooking/popupCalendar.pl?field=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Sophos UTM 'lang' Parameter XSS Vulnerability
Sophos UTM is prone to a cross-site scripting XSS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...