Vulnerabilities (CVE)

Filtered by vendor Sophos Subscribe
Filtered by product Cyberoamos
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-29574 1 Sophos 1 Cyberoamos 2023-12-10 7.5 HIGH 9.8 CRITICAL
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.
CVE-2019-17059 1 Sophos 2 Cyberoam, Cyberoamos 2023-12-10 10.0 HIGH 9.8 CRITICAL
A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.