CVE-2021-25267: XSS
First published: Thu May 05 2022(Updated: )
Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA.
Credit: security-alert@sophos.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sophos Firewall Firmware | <19.0 | |
| Sophos Firewall |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2021-25267?
The severity of CVE-2021-25267 is high with a CVSS score of 8.4.
What is the impact of CVE-2021-25267?
CVE-2021-25267 allows for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA.
How can I fix CVE-2021-25267?
Upgrade to Sophos Firewall version 19.0 or later to fix CVE-2021-25267.
Is Sophos Firewall affected by CVE-2021-25267?
Yes, Sophos Firewall older than version 19.0 GA is affected by CVE-2021-25267.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-25267?
The Common Weakness Enumeration (CWE) ID for CVE-2021-25267 is 79.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- vendor/sophos
- canonical/sophos firewall firmware
- canonical/sophos firewall