← All advisories

Medium severity4.8NVD Advisory· Published Jul 29, 2021· Updated Jun 17, 2026

CVE-2021-25273

CVE-2021-25273

Description

Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706.

Affected products

3

Sophos/Unified Threat Management Software
cpe:2.3:a:sophos:unified_threat_management:*:*:*:*:*:*:*:*
Range: <9.706
Sophos/SG UTMllm-fuzzy
Range: <9.706
Sophos/Sophos UTMv5
Range: unspecified

Patches

Vulnerability mechanics

References

2

seclists.org/fulldisclosure/2021/Dec/3nvdExploitMailing ListThird Party Advisory
community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-706-releasednvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.