Read the docs

Forcepoint

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Forcepoint records in CISA KEV

No Forcepoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Security 8 records MEDIUM Web Security 6 records MEDIUM Cloud Security Gateway 4 records MEDIUM Next Generation Firewall 3 records MEDIUM One Endpoint 3 records LOW Data Loss Prevention 2 records MEDIUM Vpn Client 2 records LOW Web Security Content Gateway 2 records MEDIUM

Records

3 records in One Endpoint · all components

TI-2019-04352 CVE-2019-6144 · GHSA-pg8h-7xhq-p9wq

Improper access control in Forcepoint One Endpoint

Priority LOW 31

This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0097 Published 2019-10-23 No fix listed CWE-284
TI-2022-10590 CVE-2022-27609 · GHSA-773f-9m23-p2hv

Incorrect authorization in Forcepoint One Endpoint

Priority LOW 26

Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00205 Published 2022-04-04 Fixed in 22.01 CWE-863
TI-2022-10589 CVE-2022-27608 · GHSA-6jwj-6h4r-9vr7

Incorrect authorization in Forcepoint One Endpoint

Priority LOW 26

Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00207 Published 2022-04-04 Fixed in 22.01 CWE-863
Open these records in search →