← Database

CVE-2022-0386

HIGH CVSS: 8.8 Published: 2022-03-22 Modified: 2026-06-17

Description

A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.

Affected Platforms

Sophos Unified Threat Management

Weakness Type

CWE-89

References