← Back to CVE List

CVE-2022-4901

Published: 2023-03-01T19:15Z
Last Modified: 2025-03-07T21:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration that must be manually loaded by the victim. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt