sophos web appliance

Name: sophos web appliance
Brand: sophos

productUS

cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical6high4medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-1671US	critical9.8OT critical	100.0% (100th)	KEV	4.3.10.4	2023-04-04	< 4.3.10.4
CVE-2016-9554US	high7.2	25.1% (98th)	Exploit	no fix	2017-01-28	= 4.2.1.3
CVE-2016-9553US	high7.2	19.8% (97th)	Exploit	no fix	2017-01-28	= 4.2.1.3
CVE-2017-6182US	critical9.8	16.7% (97th)	Exploit	no fix	2017-03-30	≤ 4.3.1.1
CVE-2013-4984US	high7.2	8.13% (95th)	Exploit	no fix	2013-09-10	76 versions
CVE-2017-6412US	high8.1	7.54% (94th)	Exploit	no fix	2017-03-30	≤ 4.3.1.1
CVE-2017-6183US	high7.2	3.21% (88th)	—	no fix	2017-03-30	≤ 4.3.1.1
CVE-2017-6184US	medium4.7	2.54% (85th)	—	no fix	2017-03-30	≤ 4.3.1.1
CVE-2022-4934US	high7.2	1.75% (78th)	—	4.3.10.4	2023-04-04	< 4.3.10.4
CVE-2017-9523US	medium6.1	1.17% (67th)	—	no fix	2017-06-09	≤ 4.3.1.4
CVE-2023-33336US	medium4.8	0.58% (47th)	—	no fix	2023-06-30	= 4.3.9.1
CVE-2020-36692US	medium5.4	0.57% (47th)	—	4.3.10.4	2023-04-04	< 4.3.10.4

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-264CWE-2641 CVEs
CWE-384Session Fixation1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.