CVE-2016-6597

Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability...

PT-2016-6981

Name of the Vulnerable Software and Affected Versions Sophos EAS Proxy versions prior to 6.2.0 for Sophos Mobile Control Description The issue allows remote attackers to access arbitrary web resources from the backend mail system via a request for the resource when Lotus Traveler is enabled. This...