CVE-2023-33336

Mô tả

Tham khảo

• inf0seq.github.io/cve/2023/04/30/Cross-site-scripting-%28XSS%29-in-Sophos-Web-Appliance-4.1.1-0.9.html

Lỗ hổng khác của web appliance

• CVE-2023-1671NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution …
• CVE-2022-4934CAO 7.2A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrator…
• CVE-2020-36692TRUNG BÌNH 5.4A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScri…
• CVE-2017-9523TRUNG BÌNH 6.1The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.
• CVE-2017-6412CAO 8.1In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.