← CVE Intelligence

CVE-2022-4901

Sophos / Sophos Connect Client PUBLISHED

Description (CNA)

Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manually loaded by the victim.

Affected (CNA)

Vendor / productVersions
Sophos / Sophos Connect Clientaffected unspecified before 2.2.90

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.