high8.8
CVE-2022-0386
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.
Impact
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Unified Threat Management | before 9.710 |