← Back to browse · API

CVE-2020-15069

Severity
CRITICAL
CVSS
9.8
EPSS
0.10674
Risk score
67.94
CISA KEV
Yes
PoC
No
Published
2020-06-29
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2020-7197, GHSA-X7VJ-WQQ4-CQ4V
Products
Sophos:XG Firewall, n/a:n/a n/a
Sources
cisa.gov CVE-2020-15069
euvd EUVD-2020-7197

Description

Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.

References