Sophos: exploited vulnerabilities
- 7exploited vulnerabilities
- 2used by ransomware
- Feb 6, 2025latest one added
- Firewall 2
- CyberoamOS 1
- XG Firewall 1
- Web Appliance 1
- SG UTM 1
- SFOS 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Feb 6, 2025 | (CROS) SQL Injection | CyberoamOS | Critical 9.8 | 4.7% |
| Feb 6, 2025 | Buffer Overflow | XG Firewall | Critical 9.8 | 11% |
| Nov 16, 2023 | Command Injection | Web Appliance | Critical 9.8 | >99.9% |
| Sep 23, 2022 | Code Injection | Firewall | Critical 9.8 | 99% |
| Mar 31, 2022 | Authentication Bypass | Firewall | Critical 9.8 | 99.8% |
| Mar 25, 2022 | Remote Code Execution | SG UTM | Critical 9.8 | 97% |
| Nov 3, 2021 | SQL Injection | SFOS | Critical 10.0 | 42% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.