568 matches found
CVE-2022-1807
CVE-2022-1807 describes multiple SQL injection vulnerabilities in the Webadmin component of Sophos Firewall, enabling privilege escalation from admin to super-admin. Affected products/versions: Sophos Firewall Webadmin prior to 18.5 MR4 and prior to 19.0 MR1. Root cause: SQLi in Webadmin leading ...
CVE-2022-1807
Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1...
Malicious code in misk-webadmin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c95d346bc698d7dce6f83414d095998dfefca847f29f4078d474bf305d9191b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4615 Malicious code in misk-webadmin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c95d346bc698d7dce6f83414d095998dfefca847f29f4078d474bf305d9191b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Sophos XG Firewall User Portal and Webadmin Authentication Bypass (CVE-2022-1040)
Binary data sophosxgfirewallcve-2022-1040.nbin...
CVE-2021-25268
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA...
CVE-2021-25268
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA...
Design/Logic Flaw
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA...
Design/Logic Flaw
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...
CVE-2021-25268
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to SFOS admin in Sophos Firewall older than version 19.0 GA...
CVE-2021-25268
CVE-2021-25268 describes multiple XSS flaws in Sophos Firewall Webadmin that enable privilege escalation from a MySophos admin to an SFOS admin on systems running Sophos Firewall older than version 19.0 GA. The root cause is XSS in the Webadmin interface leading to higher-privilege access. Docume...
CVE-2021-25267
CVE-2021-25267 : Multiple XSS vulnerabilities in Sophos Firewall Webadmin allow privilege escalation from admin to super-admin on SFOS versions older than 19.0 GA. The issue is public in the CVE record and is referenced by multiple external advisories. Affected component: Webadmin (Sophos Firewal...
CVE-2021-25267
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA...
Sophos Firewall 跨站脚本漏洞
Sophos Firewall is a firewall from Sophos UK. A security vulnerability exists in Sophos Firewall versions prior to 19.0 GA that allows an attacker to escalate privileges from MySophos Administrator to SFOS Administrator in the Webadmin of Sophos Firewall...
Sophos Firewall 跨站脚本漏洞
Sophos Firewall is a firewall from Sophos UK. A security vulnerability exists in Sophos Firewall versions prior to 19.0 GA that allows an attacker to escalate privileges from Administrator to Super Administrator in Webadmin of Sophos Firewall...
Sophos XG Firewall <= 18.5.3 RCE
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...
Sophos Firewall Authentication Bypass Vulnerability
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution...
Sophos Firewall RCE vulnerability actively exploited
THREAT LEVEL: Amber For a detailed advisory, download the pdf file here A security researcher has discovered an authentication bypass vulnerability that resides in the User Portal and Webadmin areas of Sophos Firewall. Attackers are actively exploiting this vulnerability to attack enterprises in...