Web Appliance Security Vulnerabilities and Issues — Web Appliance CVE List

Lucene search

SophosWeb Appliance

4 matches found

CVE•added 2017/03/30 5:59 p.m.•59 views

CVE-2017-6412

In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.

8.1CVSS7.9AI score0.00735EPSS

CVE•added 2017/03/30 5:59 p.m.•46 views

CVE-2017-6184

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303.

6.5CVSS5.6AI score0.01163EPSS

CVE•added 2017/03/30 5:59 p.m.•44 views

CVE-2017-6182

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.

9.8CVSS9.6AI score0.14264EPSS

CVE•added 2017/03/30 5:59 p.m.•42 views

CVE-2017-6183

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.

7.2CVSS7.6AI score0.02574EPSS