Approved changes feed: RSS · Atom

cpe:2.3:h:sophos:xg_firewall:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorSophos (a481dca1-298d-56ee-9d5c-373f6e8cead2)
ProductXg Firewall (5c5b774e-c48c-5a31-bc92-0689f3facf7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3713 not_vulnerable 2026-06-08 05:48:21.729630 Details available
HIGH (8.8)
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA.
Published: 2022-12-01T00:00:00.000Z
Updated: 2025-04-24T20:14:46.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3711 not_vulnerable 2026-06-08 05:48:21.729045 Details available
MEDIUM (4.3)
A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than version 19.5 GA.
Published: 2022-12-01T00:00:00.000Z
Updated: 2025-04-23T15:14:27.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3710 not_vulnerable 2026-06-08 05:48:21.728503 Details available
LOW (2.7)
A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA.
Published: 2022-12-01T00:00:00.000Z
Updated: 2025-04-23T20:23:36.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3709 not_vulnerable 2026-06-08 05:48:21.727979 Details available
MEDIUM (6.8)
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA.
Published: 2022-12-01T00:00:00.000Z
Updated: 2025-04-24T20:14:18.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3696 not_vulnerable 2026-06-08 05:48:21.678915 Details available
HIGH (7.2)
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA.
Published: 2022-12-01T00:00:00.000Z
Updated: 2025-04-24T20:13:49.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3226 not_vulnerable 2026-06-08 05:47:19.758204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15069 not_vulnerable 2026-06-08 05:19:25.203095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12271 not_vulnerable 2026-06-08 05:17:56.801343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11503 not_vulnerable 2026-06-08 05:16:47.284641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16118 not_vulnerable 2026-06-08 05:11:04.256274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16117 not_vulnerable 2026-06-08 05:11:04.252263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16116 not_vulnerable 2026-06-08 05:11:04.249088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18014 not_vulnerable 2026-06-08 05:09:10.169055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.