CVE-2022-4934

CVSS 3.1: 7.2 high
EPSS: 2%p77
Published: Apr 4, 2023 · Apr 4, 2023
Modified: Jun 17, 2026

Analyze CVE-2022-4934 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code.

Vendors: sophos

Products: web appliance

Weakness: CWE-77

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news

1 story

Sophos patches three issues in Sophos Web Security appliance

Security AffairsApr 10, 15:35 UTC · Apr 10, 2023VulnerabilityCVE-2023-1671 CVE-2022-4934 CVE-2020-366922 · 1 read