CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–2 of 2 records

CVE Vendor Product Added Due Status
CVE-2022-3236 — Sophos Firewall Code Injection Vulnerability
A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.
Sophos Firewall Sep 23, 2022 Oct 14, 2022
CVE-2022-1040 — Sophos Firewall Authentication Bypass Vulnerability
An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.
Sophos Firewall Mar 31, 2022 Apr 21, 2022