Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-2046

No fix known EPSS 3%

Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Published 2016-02-17 · CVE record · OSV

Products: sophos unified_threat_management_software