GCVE - cpe:2.3:o:sophos:xg_firewall_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:sophos:xg_firewall_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Sophos (`a481dca1-298d-56ee-9d5c-373f6e8cead2`)
Product	Xg Firewall Firmware (`cb01a267-b173-53e0-b9bc-ffe2b62de3a1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-3713`	vulnerable	2026-06-08 05:48:21.729604	Details available HIGH (8.8) A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall releases older than version 19.5 GA. Published: 2022-12-01T00:00:00.000Z Updated: 2025-04-24T20:14:46.346Z Open on db.gcve.eu Reference links https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3711`	vulnerable	2026-06-08 05:48:21.728958	Details available MEDIUM (4.3) A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than version 19.5 GA. Published: 2022-12-01T00:00:00.000Z Updated: 2025-04-23T15:14:27.550Z Open on db.gcve.eu Reference links https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3710`	vulnerable	2026-06-08 05:48:21.728378	Details available LOW (2.7) A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older than version 19.5 GA. Published: 2022-12-01T00:00:00.000Z Updated: 2025-04-23T20:23:36.334Z Open on db.gcve.eu Reference links https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3709`	vulnerable	2026-06-08 05:48:21.727948	Details available MEDIUM (6.8) A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA. Published: 2022-12-01T00:00:00.000Z Updated: 2025-04-24T20:14:18.242Z Open on db.gcve.eu Reference links https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3696`	vulnerable	2026-06-08 05:48:21.677842	Details available HIGH (7.2) A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older than version 19.5 GA. Published: 2022-12-01T00:00:00.000Z Updated: 2025-04-24T20:13:49.308Z Open on db.gcve.eu Reference links https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-3226`	vulnerable	2026-06-08 05:47:19.757297	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-15504`	vulnerable	2026-06-08 05:19:26.003704	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-15069`	vulnerable	2026-06-08 05:19:25.194700	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.