Read the docs

Forcepoint

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Forcepoint records in CISA KEV

No Forcepoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Security 8 records MEDIUM Web Security 6 records MEDIUM Cloud Security Gateway 4 records MEDIUM Next Generation Firewall 3 records MEDIUM One Endpoint 3 records LOW Data Loss Prevention 2 records MEDIUM Vpn Client 2 records LOW Web Security Content Gateway 2 records MEDIUM

Records

4 records in Cloud Security Gateway · all components

TI-2022-01566 CVE-2022-1700 · GHSA-7358-ghcm-c3ff

XML external entity injection in Forcepoint Data Loss Prevention

Priority MEDIUM 44

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00832 Published 2022-09-12 Fixed in 8.8.2, 8.5.5 CWE-611
TI-2023-11452 CVE-2023-26292 · GHSA-wxp2-g4cg-jg3f

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_submit.mhtml…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11451 CVE-2023-26291 · GHSA-fmgc-gfhr-4q47

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml m…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11450 CVE-2023-26290 · GHSA-xx7j-rqjq-33gm

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_reset_reques…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
Open these records in search →