Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Forcepoint Component: Cloud Security Gateway Clear all filters
TI-2023-11452 CVE-2023-26292 · GHSA-wxp2-g4cg-jg3f

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_submit.mhtml…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11451 CVE-2023-26291 · GHSA-fmgc-gfhr-4q47

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml m…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11450 CVE-2023-26290 · GHSA-xx7j-rqjq-33gm

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_reset_reques…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2022-01566 CVE-2022-1700 · GHSA-7358-ghcm-c3ff

XML external entity injection in Forcepoint Data Loss Prevention

Priority MEDIUM 44

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Ga…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00832 Published 2022-09-12 Fixed in 8.8.2, 8.5.5 CWE-611