Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2020-36692

A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a mali

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Sophos

Description

A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that must be manually submitted by the victim while logged in to SWA.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sophos Sophos Web Appliance

  • unspecified to < 4.3.10.4affected

References