Forcepoint vulnerabilities

Products

• Email Security 8
• Web Security 7
• Cloud Security Gateway 4
• Cloud Security Gateway (csg) 4
• Email Security 4
• Web Security 4
• Next Generation Firewall 3
• One Endpoint 3
• Data Loss Prevention 2
• Email Security 2
• Next Generation Firewall 2
• One Endpoint 2
• Vpn Client 2
• Web Security Content Gateway 2

Newest

• forcepoint security engine (ngfw) Security Policy Bypass in Forcepoint Security Engine (NGFW) CVE-2026-12974 7.9 HighSeptember 23, 2026
• forcepoint f1e mac This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint... CVE-2026-11970 4.8 MediumAugust 13, 2026
• forcepoint vpn client Local Privilege Escalation in VPN Client CVE-2025-12694 8.5 HighJune 4, 2026
• forcepoint web security (on-prem), web security +1 more Stored Cross Site Scripting in Forcepoint Web Security CVE-2025-2274 4.8 MediumMarch 16, 2026
• forcepoint ngfw engine, next generation firewall +1 more Local Privilege Escalation in NGFW Engine CVE-2025-12690 7.3 HighMarch 11, 2026
• forcepoint one endpoint (f1e), one data loss prevention +1 more Vulnerable Python version used in Forcepoint One DLP Client CVE-2025-14026 7.8 HighJanuary 6, 2026
• forcepoint fie endpoint Privilege Escalation and Arbitrary code execution in F1E Endpoint CVE-2025-2272 7.3 HighMay 22, 2025
• forcepoint email security Persistent XSS in blocked messages CVE-2024-9103 6.1 MediumMarch 24, 2025
• forcepoint email security Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2024-2166 8.8 HighSeptember 4, 2024
• forcepoint web security Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2023-6452 9.6 CriticalAugust 22, 2024
• forcepoint next generation firewall security management center Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature... CVE-2023-5451 6.1 MediumMarch 4, 2024
• forcepoint f|one smartedge agent, one smartedge agent +1 more Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows ... CVE-2023-1705 8.4 HighJanuary 29, 2024
• forcepoint cloud security gateway (csg), email security, web security +2 more Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2023-2080 8.5 HighJune 15, 2023
• forcepoint cloud security gateway (csg), cloud security gateway, web security +2 more Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2023-26292 6.1 MediumMarch 29, 2023
• forcepoint cloud security gateway (csg), cloud security gateway, web security +2 more Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2023-26291 6.1 MediumMarch 29, 2023
• forcepoint cloud security gateway (csg), cloud security gateway, web security +2 more Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2023-26290 6.1 MediumMarch 29, 2023
• forcepoint cloud security gateway, data loss prevention (dlp), data loss prevention +5 more +7 more Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine... CVE-2022-1700 7.5 HighSeptember 12, 2022
• forcepoint one endpoint Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide... CVE-2022-27609 6.0 MediumApril 4, 2022
• forcepoint one endpoint Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to... CVE-2022-27608 6.0 MediumApril 4, 2022
• forcepoint next generation firewall Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable... CVE-2021-41530 7.5 HighOctober 4, 2021
• forcepoint web security content gateway, data loss prevention, email security +2 more Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input,... CVE-2020-6590 7.5 HighApril 8, 2021
• forcepoint web security It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security,... CVE-2019-6146 Public exploit 6.1 MediumJanuary 22, 2020
• forcepoint ngfw security management center, next generation firewall security management center +1 more Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare... CVE-2019-6147 5.9 MediumDecember 23, 2019
• forcepoint email security, security manager +1 more It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3.... CVE-2019-6142 6.1 MediumNovember 5, 2019
• forcepoint one endpoint This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint ... CVE-2019-6144 6.5 MediumOctober 23, 2019
• forcepoint vpn client for windows, vpn client +1 more Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path... CVE-2019-6145 6.7 MediumSeptember 20, 2019
• forcepoint next generation firewall Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and... CVE-2019-6143 9.1 CriticalAugust 20, 2019
• forcepoint email security A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the... CVE-2019-6140 9.8 CriticalApril 9, 2019
• forcepoint email security A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to... CVE-2018-16530 9.8 CriticalApril 9, 2019
• forcepoint email security A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The... CVE-2018-16529 9.8 CriticalMarch 28, 2019
• forcepoint user id, forcepoint . user id (fuid) server +1 more Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload... CVE-2019-6139 9.8 CriticalFebruary 7, 2019
• openssl, 4d webstar, apple mac os x +61 more +63 more The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos... CVE-2004-0112 Fix available EPSS 10.4% 5.0 MediumMarch 18, 2004