CVE-2017-6412: Sophos Web Appliance

High severity, CVSS 8.1. EPSS: 7.5% chance of exploitation in the next 30 days.

In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.

Affected products

• Sophos Web Appliance: up to and including 4.3.1.1

Published 2017-03-30. Last modified 2026-06-17.