RSS Feed
Impact
Advisory Name
CVE
Updated
Product Family
Article Version
  • Informational
    Advisory: Oracle Cloud Data Breach
    CVE(s):
    Updated:
    Product(s):
    Sophos Central
    Article Version: 2
    Publication ID: sophos-sa-20250321-oracle-cloud-data-breach
    First Published:
    Workaround: No
  • Informational
    Advisory: GitHub Action tj-actions/changed-files Compromise (CVE-2025-30066)
    CVE(s):
    CVE-2025-30066
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    Sophos Central
    Sophos Email
    Sophos Firewall
    Sophos Home
    Sophos RED
    Sophos UTM
    Sophos Wireless
    Sophos ZTNA
    SophosLabs Intelix
    Article Version: 1
    Publication ID: sophos-sa-20250317-tj-action-compromise
    First Published:
    Workaround: No
  • Informational
    Advisory: CUPS Vulnerabilities
    CVE(s):
    CVE-2024-47076
    CVE-2024-47175
    CVE-2024-47176
    CVE-2024-47177
    Updated:
    Product(s):
    Cloud Optix
    Sophos Central
    Sophos Firewall
    Sophos RED
    Sophos Switch
    Sophos UTM
    Sophos Wireless
    Article Version: 1
    Publication ID: sophos-sa-20240926-CUPS
    First Published:
    Workaround: No
  • Informational
    Advisory: Unauthenticated Remote Code Execution Vulnerability in OpenSSH (CVE-2024-6387)
    CVE(s):
    CVE-2024-6387
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Sophos Central
    Sophos Email
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos RED
    Sophos Secure Workspace (Android)
    Sophos Switch
    Sophos UTM
    Sophos Wireless
    SophosLabs Intelix
    Article Version: 3
    Publication ID: sophos-sa-20240704-regresshion
    First Published:
    Workaround: No
  • Informational
    Advisory: TunnelVision Vulnerability in VPN Clients
    CVE(s):
    CVE-2024-3661
    Updated:
    Product(s):
    Sophos Connect Client 2.0
    Article Version: 1
    Publication ID: sophos-sa-20240610-tunnelvision
    First Published:
    Workaround: Yes
  • Informational
    Advisory: Sisense Data Breach
    CVE(s):
    Updated:
    Product(s):
    Sophos Central
    Article Version: 1
    Publication ID: sophos-sa-20240415-sisense-data-breach
    First Published:
    Workaround: No
  • Informational
    Advisory: Upstream Backdoor in XZ library
    CVE(s):
    CVE-2024-3094
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    Sophos Central
    Sophos Email
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos RED
    Sophos Switch
    Sophos UTM
    Sophos Wireless
    Sophos ZTNA
    SophosLabs Intelix
    Article Version: 1
    Publication ID: sophos-sa-20240401-XZ Backdoor
    First Published:
    Workaround: No
  • Informational
    Advisory: Leaky Vessels vulnerabilities in Docker and runc
    CVE(s):
    CVE-2024-21626
    CVE-2024-23651
    CVE-2024-23652
    CVE-2024-23653
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Sophos Central
    Sophos Email
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos RED
    Sophos Switch
    Sophos UTM
    Sophos Wireless
    Sophos ZTNA
    SophosLabs Intelix
    Article Version: 3
    Publication ID: sophos-sa-20240206-leaky-vessels
    First Published:
    Workaround: No
  • Critical
    Resolved RCE in Sophos Firewall (CVE-2022-3236)
    CVE(s):
    CVE-2022-3236
    Updated:
    Product(s):
    Sophos Firewall
    Article Version: 3
    Publication ID: sophos-sa-20220923-sfos-rce
    First Published:
    Workaround: Yes
  • Informational
    Advisory: TunnelCrack Vulnerabilities in VPN Clients
    CVE(s):
    CVE-2023-36672
    CVE-2023-35838
    CVE-2023-36673
    CVE-2023-36671
    Updated:
    Product(s):
    Sophos Connect Client 2.0
    Article Version: 1
    Publication ID: sophos-sa-20231124-tunnelcrack
    First Published:
    Workaround: Yes
  • Critical
    Sophos Web Appliance 4.3.10.4 Resolves Security Vulnerabilities
    CVE(s):
    CVE-2023-1671
    CVE-2022-4934
    CVE-2020-36692
    Updated:
    Product(s):
    Sophos Web Appliance (SWA)
    Article Version: 2
    Publication ID: sophos-sa-20230404-swa-rce
    First Published:
    Workaround: No
  • Informational
    Advisory: libwebp critical vulnerability
    CVE(s):
    CVE-2023-4863
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    Sophos Central
    Sophos Connect Client 2.0
    Sophos Email
    Sophos Email Appliance (SEA)
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos RED
    Sophos Switch
    Sophos UTM
    Sophos Wireless
    Sophos ZTNA
    SophosLabs Intelix
    Article Version: 2
    Publication ID: sophos-sa-20231002-libwebp-vuln
    First Published:
    Workaround: No
  • Informational
    Advisory: curl high severity vulnerability
    CVE(s):
    CVE-2023-38545
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    SafeGuard Enterprise (SGN)
    Sophos Central
    Sophos Connect Client 2.0
    Sophos Email
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos RED
    Sophos Switch
    Sophos UTM
    Sophos Wireless
    Sophos ZTNA
    SophosLabs Intelix
    Article Version: 1
    Publication ID: sophos-sa-20231023-curl-vuln
    First Published:
    Workaround: No
  • High
    Multiple Vulnerabilities in Exim
    CVE(s):
    CVE-2023-42114
    CVE-2023-42115
    CVE-2023-42116
    CVE-2023-42117
    CVE-2023-42118
    CVE-2023-42119
    Updated:
    Product(s):
    Sophos Firewall
    Sophos UTM
    Article Version: 1
    Publication ID: sophos-sa-20231005-exim-vuln
    First Published:
    Workaround: Yes
  • Medium
    Sophos Connect v2.2 MR1 Resolves Security Vulnerabilities
    CVE(s):
    CVE-2022-48309
    CVE-2022-48310
    CVE-2022-4901
    Updated:
    Product(s):
    Sophos Connect Client 2.0
    Article Version: 1
    Publication ID: sophos-sa-20230301-scc-csrf
    First Published:
    Workaround: No
  • Informational
    Advisory: OpenSSL high severity vulnerability
    CVE(s):
    CVE-2023-0286
    Updated:
    Product(s):
    Cloud Optix
    Intercept X Endpoint
    Intercept X for Server
    Sophos Central
    Sophos Connect Client 2.0
    Sophos Email
    Sophos Email Appliance (SEA)
    Sophos Enterprise Console (SEC)
    Sophos Firewall
    Sophos Home
    Sophos Mobile
    Sophos Mobile EAS Proxy
    Sophos RED
    Sophos UTM
    Sophos Web Appliance (SWA)
    Sophos Wireless
    SophosLabs Intelix
    Article Version: 2
    Publication ID: sophos-sa-20230214-openssl-vuln
    First Published:
    Workaround: No
  • Critical
    Sophos Firewall v19.5 GA Resolves Security Vulnerabilities
    CVE(s):
    CVE-2022-3236
    CVE-2022-3226
    CVE-2022-3713
    CVE-2022-3696
    CVE-2022-3709
    CVE-2022-3711
    CVE-2022-3710
    Updated:
    Product(s):
    Sophos Firewall
    Article Version: 3
    Publication ID: sophos-sa-20221201-sfos-19-5-0
    First Published:
    Workaround: No