Vulnerability Details CVE-2023-33336
Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 38.8%
CVSS Severity
CVSS v3 Score 4.8
References
Products affected by CVE-2023-33336
-
cpe:2.3:a:sophos:web_appliance:4.3.9.1