Exploited vulnerabilities
Sophos
7 Sophos vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue7
Last 12 months0
In ransomware campaigns2
Last addition6 February 2025
The vulnerabilities7
- 6 February 2025CVE-2020-29574CyberoamOSCyberoamOS (CROS) SQL Injection VulnerabilityRansomware
- 6 February 2025CVE-2020-15069XG FirewallSophos XG Firewall Buffer Overflow Vulnerability
- 16 November 2023CVE-2023-1671Web ApplianceSophos Web Appliance Command Injection Vulnerability
- 23 September 2022CVE-2022-3236FirewallSophos Firewall Code Injection Vulnerability
- 31 March 2022CVE-2022-1040FirewallSophos Firewall Authentication Bypass Vulnerability
- 25 March 2022CVE-2020-25223SG UTMSophos SG UTM Remote Code Execution Vulnerability
- 3 November 2021CVE-2020-12271SFOSSophos SFOS SQL Injection VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Sophos included.