Sophos
CVEs currently on EVULNABLE's Priority Feed for Sophos, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 7 Sophos CVEs in EVULNABLE's ranked feed.
#1 87 Immediate CVE-2023-1671 ExigentKEV since 2023 · listed over a yearCISA KEV Sophos — Sophos Web Appliance Command Injection Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#2 87 Immediate CVE-2022-1040 ExigentKEV since 2022 · listed over a yearCISA KEV Sophos — Sophos Firewall Authentication Bypass Vulnerability KEV, EPSS 99.8%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#3 87 Immediate CVE-2022-3236 ExigentKEV since 2022 · listed over a yearCISA KEV Sophos — Sophos Firewall Code Injection Vulnerability KEV, EPSS 98.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.989.
#4 86 Immediate CVE-2020-25223 ExigentKEV since 2022 · listed over a yearCISA KEV Sophos — Sophos SG UTM Remote Code Execution Vulnerability KEV, EPSS 96.8%
EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.968.
#5 85 Immediate CVE-2020-12271 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Sophos — Sophos SFOS SQL Injection Vulnerability KEV + ransomware, EPSS 42.4%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#6 85 Immediate CVE-2020-29574 ExigentKEV since 2025 · listed over a yearRansomwareCISA KEV Sophos — CyberoamOS (CROS) SQL Injection Vulnerability KEV + ransomware, EPSS 4.7%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#7 75 Urgent CVE-2020-15069 KEV since 2025 · listed over a yearCISA KEV Sophos — Sophos XG Firewall Buffer Overflow Vulnerability KEV, EPSS 10.7%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.107.