Sophos
Security Risk Profile
67
/100
highSecurity Risk Score
Comprehensive risk assessment based on 181 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 12, 2004 to present
181
Total CVEs
97
Critical+High
7
Exploited
70
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
70
Critical/High
Risk Level
67/100
high
⚠️ 7 Active Exploits
Severity Distribution
Critical
31High
66Medium
75Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
7Age Distribution
Common Weaknesses (CWE)
1
XSS
20
2
Buffer Overflow
18
3
SQL Injection
13
4
OS Command Injection
13
5
Command Injection
10
Most Affected Products
1. Sophos Web Appliance Firmware394
2. SOPHOS Anti-Virus157
3. Sophos Sophos Anti-Virus104
4. Sophos Web Appliance98
5. Sophos Anti-Virus85
Recent Vulnerabilities
See more →CVE-2025-10159
CVSS 9.8critical
9/9/2025🔧 No Patch
CVE-2024-13973
CVSS 7.2high
7/21/2025🔧 No Patch
CVE-2024-13974
CVSS 8.1high
7/21/2025🔧 No Patch
CVE-2025-7382
CVSS 8.8EPSS 0%high
7/21/2025🔧 No Patch
CVE-2025-7624
CVSS 9.8EPSS 0%critical
7/21/2025🔧 No Patch
CVE-2025-6704
CVSS 9.8EPSS 0%critical
7/21/2025🔧 No Patch
CVE-2025-7433
CVSS 8.8EPSS 0%high
7/17/2025🔧 No Patch
CVE-2024-13972
CVSS 8.8high
7/17/2025🔧 No Patch
CVE-2025-7472
CVSS 7.5EPSS 0%high
7/17/2025🔧 No Patch
CVE-2024-13861
CVSS 7.8high
4/11/2025🔧 No Patch
Monitor Sophos in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.