CVE-2017-9523: Sophos Web Appliance

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.

Affected products

• Sophos Web Appliance: up to and including 4.3.1.4

Published 2017-06-09. Last modified 2026-06-17.