SQL Injection

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices c…CVE-2020-12271Sophos · CVSS 10 · 43% likely

   CWE-89

2. An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.CVE-2020-29574Sophos · CVSS 9.8 · 4.7% likely

   CWE-89

3. A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to administrators achieving arbitrary code execut…CVE-2024-13973Sophos · CVSS 6.8 · 12% likely

   CWE-89

4. An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code execution, if a quarantining…CVE-2025-7624Sophos · CVSS 9.8 · 11% likely

   CWE-89

5. A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0 MR1 and older potentially allows an attacker to run arbitrary code remotely. The fix…CVE-2020-15504Sophos · 2.2% likely

   CWE-89

6. SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQL commands via the "…CVE-2018-16116Sophos · 1.8% likely

   CWE-89

7. An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8.CVE-2021-36807Sophos · CVSS 8.8 · 1.5% likely

   CWE-89

8. A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can lea…CVE-2024-12727Sophos · CVSS 9.8 · 1.4% likely

   CWE-89

9. A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.CVE-2022-0386Sophos · CVSS 8.8 · 1.2% likely

   CWE-89

10. Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1.CVE-2022-1807Sophos · CVSS 7.2 · 1.2% likely

    CWE-89

11. A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controller of Sophos Firewall releases older…CVE-2022-3710Sophos · CVSS 2.7 · 0.8% likely

    CWE-89

12. A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of Sophos Firewall releases older than vers…CVE-2022-3711Sophos · CVSS 4.3 · 0.8% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.