← CVE Intelligence

CVE-2020-36692

Sophos / Sophos Web Appliance PUBLISHED

Description (CNA)

A reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4 allows execution of JavaScript code in the victim browser via a malicious form that must be manually submitted by the victim while logged in to SWA.

Affected (CNA)

Vendor / productVersions
Sophos / Sophos Web Applianceaffected unspecified before 4.3.10.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.