← Database

CVE-2022-3709

MEDIUM CVSS: 6.8 Published: 2022-12-01 Modified: 2026-06-17

Description

A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA.

Affected Platforms

Sophos Xg Firewall FirmwareSophos Xg Firewall

Weakness Type

CWE-79, CWE-79

References