Sophos known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 7 Sophos vulnerabilities: 0 added in the last 365 days, 7 rated critical (CVSS 9 or higher), and 2 with known ransomware use. The most recent was added Feb 6, 2025.
RSS feed for Sophos exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2025-02-06 | CVE-2020-15069 | Sophos XG Firewall Buffer Overflow Vulnerability | 9.8 (v3.1) | 10.7% | 2025-02-27 | Unknown |
| 2025-02-06 | CVE-2020-29574 | CyberoamOS (CROS) SQL Injection Vulnerability | 9.8 (v3.1) | 4.7% | 2025-02-27 | Known |
| 2023-11-16 | CVE-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | 9.8 (v3.1) | >99.9% | 2023-12-07 | Unknown |
| 2022-09-23 | CVE-2022-3236 | Sophos Firewall Code Injection Vulnerability | 9.8 (v3.1) | 98.9% | 2022-10-14 | Unknown |
| 2022-03-31 | CVE-2022-1040 | Sophos Firewall Authentication Bypass Vulnerability | 9.8 (v3.1) | 99.8% | 2022-04-21 | Unknown |
| 2022-03-25 | CVE-2020-25223 | Sophos SG UTM Remote Code Execution Vulnerability | 9.8 (v3.1) | 96.8% | 2022-04-15 | Unknown |
| 2021-11-03 | CVE-2020-12271 | Sophos SFOS SQL Injection Vulnerability | 10 (v3.0) | 42.4% | 2022-05-03 | Known |