CVE-2023-33336

MediumCVSS 4.8

Published: 30/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

A reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via double quotes.

Risk Assessment

This vulnerability could lead to the execution of malicious code in the user's browser context, posing a threat to the security of the organization's data and systems.

Recommendation

It is recommended to update to the latest version of Sophos Web Appliance to mitigate this vulnerability and to monitor systems for potential attacks.

Original NVD description (English source)

Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes.