CVE-2016-6597

—

CVSS 3.0

8.6 high

EPSS

4%p91

Published

Aug 10, 2016 (Aug 10, 2016)

Modified

Jun 17, 2026

Description

Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability.

Vendors: sophos
Products: mobile control eas proxy
Weakness: CWE-254
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news0 stories

No ingested article mentions this CVE yet.