How many sophos unified threat management CVEs are in CISA KEV?

Yes — 1 of sophos unified threat management's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of sophos unified threat management are affected?

20 distinct sophos unified threat management versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in sophos unified threat management CVEs?

sophos unified threat management's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical sophos unified threat management vulnerabilities are there?

sophos unified threat management has 1 critical and 3 high-severity CVEs.

What is the average severity of sophos unified threat management CVEs?

The average CVSS base score across sophos unified threat management's scored CVEs is 7.1.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

sophos

7 CVEs

1 in CISA KEV

sophos unified threat management Vulnerabilities

Name: sophos unified threat management vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for unified threat management by sophos.

7

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.1

Avg CVSS

2012–2022

Last updated March 21, 2022

Overview

sophos unified threat management has 7 published CVE records since 2012, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting sophos unified threat management, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of sophos unified threat management's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of sophos unified threat management's CVEs is confirmed exploited in the wild.

Public exploits

2

2 of sophos unified threat management's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every sophos unified threat management version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

110 <= v <= 1103 CVEs
120 <= v <= 1203 CVEs
220 <= v <= 2203 CVEs
320 <= v <= 3203 CVEs
425 <= v <= 4253 CVEs
525 <= v <= 5253 CVEs
625 <= v <= 6253 CVEs
< 9.7102 CVEs
< 9.5111 CVE
< 9.7061 CVE
9.511 <= v <= 9.5111 CVE
9.600 <= v < 9.6071 CVE
9.607 <= v <= 9.6071 CVE
9.700 <= v < 9.7051 CVE
9.705 <= v <= 9.7051 CVE

Fixed in

9.7102 CVEs
9.5111 CVE
9.6071 CVE
9.7051 CVE
9.7061 CVE

Find a version

7 CVEs

Sort

High vulnerability · 2022-03-21
CVE-2022-0652
Patch
High · CVSS 7.8
EPSS 0.2% (9th pct)2022-03-21
High vulnerability · 2022-03-21
CVE-2022-0386
Patch
High · CVSS 8.8
EPSS 1.2% (65th pct)2022-03-21
Medium vulnerability · 2021-07-29
CVE-2021-25273
Patch
Medium · CVSS 4.8
EPSS 0.8% (54th pct)2021-07-29
Critical vulnerability · 2020-09-25
CVE-2020-25223
CISA KEV
Public exploit
Patch
CWE-78
Added to CISA KEV 2022-03-25
Critical · CVSS 10.0
EPSS 96.7% (100th pct)2020-09-25
Medium vulnerability · 2016-01-14
CVE-2016-0777
Public exploit
Patch
CWE-200
Medium · CVSS 6.5
EPSS 63.5% (99th pct)2016-01-14
High vulnerability · 2014-03-18
CVE-2014-2537
High · CVSS 7.8
EPSS 3.1% (86th pct)2014-03-18
Medium vulnerability · 2012-07-09
CVE-2012-3238
Medium · CVSS 4.3
EPSS 3.5% (88th pct)2012-07-09

Common weakness types

The CWE weakness categories most often found in sophos unified threat management CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many sophos unified threat management CVEs were published each year.

2012

1

2014

1

2016

1

2020

1

2021

1

2022

2

Other sophos products

Browse vulnerabilities for other products by sophos.

sophos anti-virus36 CVEs Sophos Firewall21 CVEs web appliance18 CVEs firewall13 CVEs xg firewall13 CVEs anti-virus12 CVEs firewall firmware10 CVEs sophos puremessage anti-virus9 CVEs

All sophos vulnerabilities

Frequently asked questions

Common questions about sophos unified threat management vulnerabilities.

How many CVEs does sophos unified threat management have?: sophos unified threat management has 7 published CVE records since 2012.
How many sophos unified threat management CVEs are in CISA KEV?: Yes — 1 of sophos unified threat management's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for sophos unified threat management vulnerabilities?: Yes — 2 of sophos unified threat management's CVEs have a known public exploit.
Which versions of sophos unified threat management are affected?: 20 distinct sophos unified threat management versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sophos unified threat management CVEs?: sophos unified threat management's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical sophos unified threat management vulnerabilities are there?: sophos unified threat management has 1 critical and 3 high-severity CVEs.
What is the average severity of sophos unified threat management CVEs?: The average CVSS base score across sophos unified threat management's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sophos unified threat management vulnerabilities

Monitor new sophos unified threat management vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing