Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Forcepoint Component: Web Security Clear all filters
TI-2025-01998 CVE-2025-2274 · GHSA-m9gf-8f42-8f26

Stored Cross Site Scripting in Forcepoint Web Security

Priority LOW 21

Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00159 Published 2026-03-16 No fix listed CWE-79
TI-2023-01956 CVE-2023-2080 · GHSA-3v5f-42jw-9fgm

SQL injection in Forcepoint Cloud Security Gateway

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL In…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00511 Published 2023-06-15 Fixed in TBD CWE-89
TI-2023-11452 CVE-2023-26292 · GHSA-wxp2-g4cg-jg3f

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_submit.mhtml…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11451 CVE-2023-26291 · GHSA-fmgc-gfhr-4q47

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml m…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2023-11450 CVE-2023-26290 · GHSA-xx7j-rqjq-33gm

Cross-site scripting in Forcepoint Cloud Security Gateway

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_reset_reques…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-03-29 Fixed in 03/29/2023 CWE-79
TI-2019-04354 CVE-2019-6146 · GHSA-wwr9-73jw-v7jx

Cross-site scripting in Forcepoint Web Security

Priority LOW 33

It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0298 Published 2020-01-22 No fix listed CWE-79