CVE-2016-2046

Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2016-2046

A concrete XSS vulnerability in Sophos UTM 9 UserPortal: the lang parameter is not properly sanitized, enabling remote injection of arbitrary script/HTML. Affected: Sophos UTM 9 prior to 9.353 (per CVE-2016-2046). Exploitation involves crafting a link the user visits (user interaction required pe...

Sophos UTM 9 Cross Site Scripting

----------- Vendor: ----------- Sophos https://www.sophos.com ----------------------------------------- Affected Products/Versions: ----------------------------------------- Product: Sophos UTM 9 Version: 9.350-12 with pattern version 92405 potentially lower ---------------- Description:...