← All advisories

Medium severity6.8NVD Advisory· Published May 5, 2022· Updated Jun 17, 2026

CVE-2021-25267

CVE-2021-25267

Description

Multiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 19.0 GA.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sophos/Firewall Firmware
cpe:2.3:o:sophos:firewall_firmware:*:*:*:*:*:*:*:*
Range: <19.0
Sophos/XG Firewallllm-fuzzy
Range: <19.0 GA
Sophos/Sophos Firewallcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

1

www.sophos.com/en-us/security-advisories/sophos-sa-20220505-sfos-19-0-0nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.