CRITICALCVSS v3.1 9.8Actively exploited · CISA KEV since 2022-09-23Vulnerability
CVE-2022-3236
A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.
Properties
- Vulnerability name
- Sophos Firewall Code Injection Vulnerability
- Epss score
- 0.98905
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2022-10-14
- Exploited euvd since
- 2022-09-23T00:00:00+00:00
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2022-09-23
- Score
- 9.8
- Euvd base score version
- 3.1
- Euvd vendor
- Sophos
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 9.8
- Vendor project
- Sophos
- Content hash
- 7a91b1446c7bcb2fe78994edf639613a17d5ef2dc8740e261ca80eceb8e5d5bc
- Published at
- 2022-09-23T13:15:10.327
- Euvd updated
- 2026-10-07T17:39:46+00:00
- Last modified
- 2026-06-17T04:59:07.653
- Euvd epss pct
- 98.88
- Epss percentile
- 0.99928
- Licence
- FIRST EPSS: free to use; attribution requested in publications or products (FAQ)
Related Entities (4)
AFFECTS_PRODUCT (1)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph