Firewall
17 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Firewall, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Firewall CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 2 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 17 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High7
- Medium7
Latest CVEs
The 15 most recently published vulnerabilities affecting Firewall.
- CVE-2024-10542Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation9.8
- CVE-2024-10781Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation8.1
- CVE-2024-7249Comodo Firewall Link Following Local Privilege Escalation Vulnerability7.8
- CVE-2023-42552Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamp...4.4
- CVE-2023-5552A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3) and older, if the p...7.1
- CVE-2022-40630Improper Session Management Vulnerability in Tacitine Firewall6.5
- CVE-2022-40629Sensitive Information Disclosure Vulnerability in Tacitine Firewall7.5
- CVE-2022-40628Remote Code Execution Vulnerability in Tacitine Firewall9.8
- CVE-2022-3236A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.9.8
- CVE-2022-1807Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1.7.2
- CVE-2022-0675Puppet Firewall Module May Leave Unmanaged Rules5.6
- CVE-2021-24295Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.47.5
- CVE-2019-14270Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Esc...7.1
- CVE-2012-4923Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) createrule parameter to dnat.cgi, (2) addrule pa...4.3
- CVE-2010-0475Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or H...4.3
Product grouping is registry-driven, with AI assist and human review. How it works