Security Advisories

Flux RSS
Impact
Advisory Name
CVE
Updated
Product Family
Article Version
  • Critical
    Sophos Web Appliance 4.3.10.4 Resolves Security Vulnerabilities
    CVE(s):
    CVE-2023-1671
    CVE-2022-4934
    CVE-2020-36692
    Updated:
    Product(s):
    Sophos Web Appliance (SWA)
    Version de l’article 1
    ID de la publication sophos-sa-20230404-swa-rce
    Première publication
    Solution No
  • Medium
    Sophos Connect v2.2 MR1 Resolves Security Vulnerabilities
    CVE(s):
    CVE-2022-48309
    CVE-2022-48310
    CVE-2022-4901
    Updated:
    Product(s):
    Sophos Connect Client 2.0
    Version de l’article 1
    ID de la publication sophos-sa-20230301-scc-csrf
    Première publication
    Solution No
  • Informational
    Advisory: OpenSSL high severity vulnerability
    CVE(s):
    CVE-2023-0286
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    Sophos Central
    Sophos Connect Client 2.0
    Sophos Email
    Sophos Email Appliance (SEA)
    Sophos Enterprise Console (SEC)
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos RED
    Sophos UTM
    Sophos Web Appliance (SWA)
    Sophos Wireless
    SophosLabs Intelix
    Version de l’article 2
    ID de la publication sophos-sa-20230214-openssl-vuln
    Première publication
    Solution No
  • Critical
    Sophos Firewall v19.5 GA Resolves Security Vulnerabilities
    CVE(s):
    CVE-2022-3236
    CVE-2022-3226
    CVE-2022-3713
    CVE-2022-3696
    CVE-2022-3709
    CVE-2022-3711
    CVE-2022-3710
    Updated:
    Product(s):
    Sophos Firewall
    Version de l’article 3
    ID de la publication sophos-sa-20221201-sfos-19-5-0
    Première publication
    Solution No
  • Informational
    Advisory: OpenSSL 3.x critical vulnerability
    CVE(s):
    CVE-2022-3786
    CVE-2022-3602
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    Reflexion
    SafeGuard Enterprise (SGN)
    Sophos Authenticator
    Sophos Central
    Sophos Connect Client 2.0
    Sophos Email
    Sophos Email Appliance (SEA)
    Sophos Enterprise Console (SEC)
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos RED
    Sophos Transparent Authentication Suite (STAS)
    Sophos UTM
    Sophos UTM Manager
    Sophos Web Appliance (SWA)
    Sophos Wireless
    Sophos ZTNA
    SophosLabs Intelix
    Version de l’article 3
    ID de la publication sophos-sa-20221031-openssl-vuln
    Première publication
    Solution No
  • Critical
    Resolved RCE in Sophos Firewall (CVE-2022-3236)
    CVE(s):
    CVE-2022-3236
    Updated:
    Product(s):
    Sophos Firewall
    Version de l’article 2
    ID de la publication sophos-sa-20220923-sfos-rce
    Première publication
    Solution Yes
  • High
    Sophos Firewall v19.0 MR1 Resolves Security Vulnerabilities
    CVE(s):
    CVE-2022-1292
    CVE-2022-1807
    Updated:
    Product(s):
    Sophos Firewall
    Version de l’article 1
    ID de la publication sophos-sa-20220907-sfos-19-0-1
    Première publication
    Solution No
  • Critical
    Sophos Firewall v18.5 MR4 Resolves Security Vulnerabilities
    CVE(s):
    CVE-2022-1040
    CVE-2021-25268
    CVE-2022-1292
    CVE-2022-1807
    CVE-2021-25267
    Updated:
    Product(s):
    Sophos Firewall
    Version de l’article 1
    ID de la publication sophos-sa-20220907-sfos-18-5-4
    Première publication
    Solution No
  • Critical
    Resolved RCE in Sophos Firewall (CVE-2022-1040)
    CVE(s):
    CVE-2022-1040
    Updated:
    Product(s):
    Sophos Firewall
    Version de l’article 3
    ID de la publication sophos-sa-20220325-sfos-rce
    Première publication
    Solution Yes
  • Informational
    Advisory: Spring Cloud Function (SPEL) and Spring Framework AKA SpringShell vulnerabilities (CVE-2022-22963, CVE-2022-22965)
    CVE(s):
    CVE-2022-22963
    CVE-2022-22965
    Updated:
    Product(s):
    Cloud Optix
    Reflexion
    Sophos Central
    Sophos Email
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos Switch
    Sophos UTM
    Sophos UTM Manager
    Version de l’article 1
    ID de la publication sophos-sa-20220401-spring-rce
    Première publication
    Solution No
  • High
    Advisory: OpenSSL DoS vulnerability (CVE-2022-0778)
    CVE(s):
    CVE-2022-0778
    Updated:
    Product(s):
    Sophos Firewall
    Sophos UTM
    Sophos Web Appliance (SWA)
    Version de l’article 1
    ID de la publication sophos-sa-20220318-openssl-dos
    Première publication
    Solution No
  • Medium
    SSL VPN Client Local DoS (CVE-2021-36809)
    CVE(s):
    CVE-2021-36809
    Updated:
    Product(s):
    Sophos SSL VPN client
    Version de l’article 1
    ID de la publication sophos-sa-20220303-sslvpn-local-dos
    Première publication
    Solution No
  • Informational
    Advisory: Central Logging
    CVE(s):
    Updated:
    Product(s):
    Sophos Central
    Version de l’article 2
    ID de la publication 2022-02-CentralLogging
    Première publication
    Solution No
  • Critical
    Advisory: Log4j zero-day vulnerability AKA Log4Shell (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832)
    CVE(s):
    CVE-2021-44228
    CVE-2021-45046
    CVE-2021-45105
    CVE-2021-44832
    Updated:
    Product(s):
    Client Authentication Agent
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    Reflexion
    SafeGuard Enterprise (SGN)
    Sophos UTM
    Sophos UTM Manager
    Sophos Authenticator
    Sophos Central
    Sophos Connect Client 2.0
    Sophos Email
    Sophos Email Appliance (SEA)
    Sophos Enterprise Console (SEC)
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos RED
    Sophos SSL VPN client
    Sophos Transparent Authentication Suite (STAS)
    Sophos Web Appliance (SWA)
    Sophos Wireless
    Sophos ZTNA
    SophosLabs Intelix
    Version de l’article 27
    ID de la publication sophos-sa-20211210-log4j-rce
    Première publication
    Solution No