Web Appliance Security Vulnerabilities and Issues — Web Appliance CVE List

Lucene search

SophosWeb Appliance

3 matches found

CVE•added 2017/03/30 5:59 p.m.•59 views

CVE-2017-6412

In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.

8.1CVSS7.9AI score0.00735EPSS

CVE•added 2014/04/11 3:55 p.m.•49 views

CVE-2014-2850

The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.

8.5CVSS7.8AI score0.75717EPSS

CVE•added 2014/04/11 3:55 p.m.•37 views

CVE-2014-2849

The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.

8.5CVSS6.4AI score0.73239EPSS