CVE-2017-9523by Jeremyin Security Bulletinson Posted on June 9, 2017 The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.