CVE-2017-6182: Sophos Web Appliance

Critical severity, CVSS 9.8. EPSS: 16.7% chance of exploitation in the next 30 days.

In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.

Affected products

• Sophos Web Appliance: up to and including 4.3.1.1

Published 2017-03-30. Last modified 2026-06-17.