CVE-2022-48310

5.5 mediumEPSS 0.1%

Medium (5.5) in sophos connect. EPSS 0.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2023-03-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sophos:connect

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf
https://www.sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf

Check your stack JSON