Approved changes feed: RSS · Atom

cpe:2.3:o:sophos:web_appliance_firmware:3.6.1.1:*:*:*:*:*:*:*

part: o version: 3.6.1.1 update: *

VendorSophos (a481dca1-298d-56ee-9d5c-373f6e8cead2)
ProductWeb Appliance Firmware (7cafd3d1-59cd-52ab-9d2c-90d3f36e3f6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2850 vulnerable 2026-06-03 14:33:51.926440 Details available
The network interface configuration page (netinterface) in Sophos Web Appliance before 3.8.2 allows remote administrators to execute arbitrary commands via shell metacharacters in the address parameter.
Published: 2014-04-11T15:00:00.000Z
Updated: 2024-09-16T23:21:40.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2849 vulnerable 2026-06-03 14:33:51.911849 Details available
The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.
Published: 2014-04-11T15:00:00.000Z
Updated: 2024-09-16T17:34:14.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4983 vulnerable 2026-06-03 14:33:20.247839 Details available
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.
Published: 2013-09-10T10:00:00.000Z
Updated: 2024-09-17T03:02:50.133Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.