Read the docs

Forcepoint

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Forcepoint records in CISA KEV

No Forcepoint vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Security 8 records MEDIUM Web Security 6 records MEDIUM Cloud Security Gateway 4 records MEDIUM Next Generation Firewall 3 records MEDIUM One Endpoint 3 records LOW Data Loss Prevention 2 records MEDIUM Vpn Client 2 records LOW Web Security Content Gateway 2 records MEDIUM

Records

6 records in Web Security · all components

TI-2023-01956 CVE-2023-2080 · GHSA-3v5f-42jw-9fgm

SQL injection in Forcepoint Cloud Security Gateway

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL In…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00511 Published 2023-06-15 Fixed in TBD CWE-89
TI-2019-04354 CVE-2019-6146 · GHSA-wwr9-73jw-v7jx

Cross-site scripting in Forcepoint Web Security

Priority LOW 33

It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0298 Published 2020-01-22 No fix listed CWE-79
TI-2023-11452 CVE-2023-26292 · GHSA-wxp2-g4cg-jg3f

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_submit.mhtml…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11451 CVE-2023-26291 · GHSA-fmgc-gfhr-4q47

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml m…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11450 CVE-2023-26290 · GHSA-xx7j-rqjq-33gm

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_reset_reques…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2025-01998 CVE-2025-2274 · GHSA-m9gf-8f42-8f26

Stored Cross Site Scripting in Forcepoint Web Security

Priority LOW 21

Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00159 Published 2026-03-16 No fix listed CWE-79
Open these records in search →