Sophos ES4000 vulnerabilities

2 CVEs affecting Sophos ES4000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-3177, published 2008-07-15.

More from Sophos.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-3177, published 2008-07-15. Medium severity, CVSS 5.0. EPSS: 5.1% chance of exploitation in the next 30 days. Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of…
• CVE-2008-0838, published 2008-02-20. Medium severity, CVSS 4.3. EPSS: 4.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Email Security Appliance 2.1.0.0 allow remote attackers to inject arbitrary web…