CVE-2017-9523

Description

References

• swa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.2.html · Release Notes
• securityfocus.com/bid/99016

web appliance 的其他漏洞

• CVE-2023-33336中危 4.8Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inpu…
• CVE-2023-1671严重 9.8EXPLOITED (CISA KEV)A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution …
• CVE-2022-4934高危 7.2A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrator…
• CVE-2020-36692中危 5.4A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScri…
• CVE-2017-6412高危 8.1In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.