VULNERABILITY INTELLIGENCE

CVE-2016-7397

CVSS score4.4 MEDIUM

EPSS probability0.54%

CISA KEVNot currently listed

Published2016-10-03

Last modified2026-06-17

Description

The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab.