CVE-2022-1807 - Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1

Back Back to CVE browser

HIGH

Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1

Published Sep 7, 2022

7.2

HIGH

CVSS 3.1

EPSS 1.14%

Description

Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1.

Affected products

Vendor Sophos Product Sophos Firewall Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <18.5 MR4
- Version
  unspecified
  Status
  affected
  Constraints
  <19.0 MR1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Sophos

Sophos Firewall

n/a

Version	Status	Constraints
unspecified	affected	<18.5 MR4
unspecified	affected	<19.0 MR1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://www.sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-18-5-4
x_refsource_CONFIRMVendor Advisory
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-19-0-1
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-18-5-4		x_refsource_CONFIRMVendor Advisory
https://www.sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-19-0-1		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Sophos

Published Sep 7, 2022

Updated Jun 17, 2025

Reserved May 20, 2022

Link CVE-2022-1807

CISA Vulnrichment

Updated Jun 17, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-1807

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-1807