Sophos IPS and Application Signature update release notes

Version 18.23.35

Released on May 13, 2025

Introduction

The Release Note document for IPS and Application signature Database version 18.23.35 includes support for both, the new and the updated Signatures. The following sections describe the release in detail.

Release Information

Upgrade Applicable on: Version 18.23.34

Fixed issues, listed by ID, description, explanation and Workaround.

Appliance Model	Details of Changes			Module	More Details
All Deployments	0 Application	0 Application Signature	0 Application category	Application Filter	Click Here for details of changes
XGS-87, XGS-87(w), XGS-107, XGS-107(w), XGS-116, XGS-116(w), XGS-126, XGS-126(w), XGS-136, XGS-136(w), XGS-2100, XGS-2300, XGS-3100, XGS-3300, XGS-4300, XGS-4500 XG-86, XG-86(w), XG-106, XG-106(w), XG-115, XG-115(w), XG-125, XG-125(w), XG-135, XG-135(w), XG-210, XG-230, XG-310, XG-330, XG-430, XG-450 SG-105, SG-105(w), SG-115, SG-115(w), SG-125, SG-125(w), SG-135, SG-135(w), SG-210, SG-230, SG-310, SG-330, SG-430, SG-450, SG-550, SG-650 Any virtual deployment with RAM < 24GB	18 Signatures	16 Vulnerabilities	1 IPS Category	IPS Filter	Click Here for details of changes
XG-550, XG-650, XG-750 XGS-5500, XGS-6500 Any virtual deployment with RAM >24GB	20 Signatures	18 Vulnerabilities	2 IPS Categories	IPS Filter	Click Here for details of changes

Fixed issues, listed by ID, description, explanation and Workaround.
Risk Level	Risk Criteria
1	Very Low
2	Low
3	Medium
4	High
5	Very High

Risk Level

Risk Criteria

Very Low

Low

Medium

High

Very High

Name	CVE-ID	Category	Severity
SERVER-WEBAPP Commvault Command Center CVE-2025-34028 Path Traversal Vulnerability	CVE-2025-34028	server-webapp	1
SERVER-WEBAPP FlowiseAI Flowise attachments CVE-2025-26319 Directory Traversal	CVE-2025-26319	server-webapp	1
SERVER-WEBAPP Gladinet CentreStack .NET object CVE-2025-30406 Deserialization Attempt	CVE-2025-30406	server-webapp	2
SERVER-WEBAPP Gladinet CentreStack .NET object deserialization attempt	CVE-2025-30406	server-webapp	2
SERVER-WEBAPP GLPI-Project GLPI Inventory handleAgent CVE-2025-24799 SQL Injection	CVE-2025-24799	server-webapp	2
SERVER-WEBAPP Ivanti Endpoint Manager serverAsset updateAssetInfo CVE-2024-13162 SQL Injection Vulnerability	CVE-2024-13162	server-webapp	3
SERVER-WEBAPP Kubernetes ingress-nginx remote code execution attempt	CVE-2025-1097, CVE-2025-1098, CVE-2025-1974, CVE-2025-24514	server-webapp	2
SERVER-WEBAPP Microsoft SharePoint Server Business Data Connectivity ExecuteBdcMethod CVE-2024-38227 Unsafe Reflection Vulnerability	CVE-2024-38227	server-webapp	2
SERVER-WEBAPP Microsoft SharePoint Server Business Data Connectivity ExecuteBdcMethod CVE-2024-38227 Unsafe Reflection Vulnerability	CVE-2024-38227	server-webapp	5
SERVER-WEBAPP OpenEMR Bronchitis Form CVE-2025-30161 Stored Cross-Site Scripting	CVE-2025-30161	server-webapp	2
SERVER-WEBAPP Riello Netman 204 - CVE-2024-8877 SQL Injection Attempt	CVE-2024-8877	server-webapp	1
SERVER-WEBAPP ruby-saml XMLSecurity Namespace Collision CVE-2025-25292 Authentication Bypass Vulnerability	CVE-2025-25292	server-webapp	3
SERVER-WEBAPP Vendure Commerce Platform CVE-2024-48914 Denial of Service	CVE-2024-48914	server-webapp	1
SERVER-WEBAPP WordPress TI WooCommerce Wishlist plugin CVE-2024-43917 SQL Injection Vulnerability	CVE-2024-43917	server-webapp	3
SERVER-WEBAPP WP Automatic Allows CVE-2024-27954 Path Traversal Vulnerability	CVE-2024-27954	server-webapp	1
SERVER-WEBAPP Zimbra Collaboration Suite remote code execution attempt	CVE-2015-1197, CVE-2022-41352	server-webapp	1

Name

CVE-ID

Severity Level	Severity Criteria
1	Critical
2	Major
3	Moderate
4	Minor
5	Warning

Sophos IPS and Application Signature Update

These release notes are for Sophos IPS and Application signature updates.

Version 18.23.35
Released on May 13, 2025

Introduction

Release Information

Upgrade Information

Application Signatures

Terms Explained

IPS Signatures

IPS Signatures

Terms Explained

Important Notice

RESTRICTED RIGHTS

Corporate Headquarters