Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2022-4901

Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manuall

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Sophos

Description

Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manually loaded by the victim.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sophos Sophos Connect Client

  • unspecified to < 2.2.90affected

References