CVE-2020-36692

CVSS 3.1: 5.4 medium
EPSS: <1%p45
Published: Apr 4, 2023 · Apr 4, 2023
Modified: Jun 17, 2026

Analyze CVE-2020-36692 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that must be manually submitted by the victim while logged in to SWA.

Vendors: sophos

Products: web appliance

Weakness: CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news

1 story

Sophos patches three issues in Sophos Web Security appliance

Security AffairsApr 10, 15:35 UTC · Apr 10, 2023VulnerabilityCVE-2023-1671 CVE-2022-4934 CVE-2020-366922 · 1 read