Sophos Sophos UTM

• CVE-2022-0652 Low 3.3 Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these 0.2%
• CVE-2022-0386 High 8.8 A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710. 1.2%
• CVE-2021-25273 Unrated Stored XSS can execute as administrator in quarantined email detail view in Sophos UTM before version 9.706. 0.8%