Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Forcepoint Component: One Endpoint Clear all filters
TI-2022-10590 CVE-2022-27609 · GHSA-773f-9m23-p2hv

Incorrect authorization in Forcepoint One Endpoint

Priority LOW 26

Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00205 Published 2022-04-04 Fixed in 22.01 CWE-863
TI-2022-10589 CVE-2022-27608 · GHSA-6jwj-6h4r-9vr7

Incorrect authorization in Forcepoint One Endpoint

Priority LOW 26

Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00207 Published 2022-04-04 Fixed in 22.01 CWE-863
TI-2019-04352 CVE-2019-6144 · GHSA-pg8h-7xhq-p9wq

Improper access control in Forcepoint One Endpoint

Priority LOW 31

This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0097 Published 2019-10-23 No fix listed CWE-284