Sophos Mobile Panel - Detect

Sophos Mobile panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Sophos Mobile panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Sophos Mobile Panel - Detect', 'description': 'Sophos...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

VulnCheck KEV: CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

Server side request forgery (ssrf)

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

PT-2022-24997 · Sophos · Sophos Mobile

Name of the Vulnerable Software and Affected Versions: Sophos Mobile versions 5.0.0 through 9.7.4 Description: An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises. This issue may lead to significant...

Sophos Mobile code-related vulnerabilities

Sophos Mobile is a secure Unified Endpoint Management UEM solution from Sophos UK. A security vulnerability exists in Sophos Mobile versions 5.0.0 through 9.7.4, which stems from an XML External Entity XEE issue that allows server-side request forgery SSRF and potential code execution...

CVE-2022-3980

CVE-2022-3980 affects Sophos Mobile on-premises (versions 5.0.0–9.7.4) and is caused by XML External Entity (XXE) processing, enabling SSRF and potential code execution. Exploitation could allow reading arbitrary server files and SSRF attacks; base CVSS v3.1 score is 9.8 (CRITICAL). Affected soft...

CVE-2022-3980: Improper Restriction of XML External Entity Reference

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

CVE-2022-3980

An XML External Entity XEE vulnerability allows server-side request forgery SSRF and potential code execution in Sophos Mobile managed on-premises between versions 5.0.0 and 9.7.4...

PT-2020-20611

Name of the Vulnerable Software and Affected Versions Sophos Endpoint Protection versions prior to 2020-01-14 Sophos Cloud Optix versions prior to 2020-01-14 Sophos Mobile versions prior to 2020-01-14 Sophos Intercept X Endpoint versions prior to 2020-01-14 Sophos Intercept X for Server versions...

Sophos Mobile Control EAS Proxy Information Disclosure Vulnerability

Sophos EMM Enterprise Mobility Management platform is a set of solutions from Sophos UK for managing and securing enterprise mobile devices.Sophos EAS Proxy for Sophos Mobile Control is one of the components that supports access control of email via mobile devices. Sophos EAS Proxy for Sophos...

CVE-2016-6597

Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability...

CVE-2016-6597

Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability...

CVE-2016-6597: Undefined Security Weakness

Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability...

Sophos Mobile Control 3.5.0.3 Open Reverse Proxy

Application: Sophos Mobile Control EAS Proxy Versions Affected: 3.5.0.3 Vendor URL: https://www.sophos.com/ Bugs: Open Reverse Proxy Sent: 30.06.2016 Reported: 05.07.2016 Vendor response: 13.07.2016 Published BugFix by vendor: 28.07.2016 Date of Public Advisory: 05.08.2016 Reference: Sophos Case...

Sophos Mobile Control - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Sophos Mobile Control published at the 'play' market has multiple vulnerabilities...