CVE-2022-0386

HIGH 8.8CVE-2022-0386 · Published 22/03/2022 · updated 17/06/2026

In short

CVE-2022-0386 is a HIGH (CVSS 8.8) vulnerability affecting unified threat management (sophos).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.9% of all vulnerabilities.
Fix: update to 9.710 or later.

Package	Affected versions	Patched versions
unified threat management sophos	`< 9.710`	`9.710`

Description

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.

References

sophos.com/en-us/security-advisories/sophos-sa-20220321-utm-9710 · Vendor Advisory

More vulnerabilities in unified threat management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free