Forcepoint Vulnerabilities and Affected Products
Vulnerabilities associated with One Endpoint.
Products
Clear product- Cloud Security Gateway (CSG)4 vulnerabilities
- Forcepoint Email Security4 vulnerabilities
- Web Security4 vulnerabilities
- Email Security2 vulnerabilities
- One Endpoint2 vulnerabilities
- Cloud Security Gateway1 vulnerability
- Data Loss Prevention (DLP)1 vulnerability
- Email Security with DLP enabled1 vulnerability
- email_security1 vulnerability
- F1E mac1 vulnerability
- FIE Endpoint1 vulnerability
- Forcepoint Next Generation Firewall1 vulnerability
- Forcepoint One Endpoint (F1E)1 vulnerability
- Forcepoint VPN Client for Windows1 vulnerability
- F|One SmartEdge Agent1 vulnerability
- Next Generation Firewall Security Management Center1 vulnerability
- NGFW Engine1 vulnerability
- NGFW Security Management Center1 vulnerability
- One Endpoint (F1E) with Policy Engine1 vulnerability
- VPN Client1 vulnerability
- Web Security (On-Prem)1 vulnerability
- Web Security Content Gateway1 vulnerability
- web_security1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-27609MEDIUM | Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges. This could result in a user disabling Forcepoint One Endpoint and the protection offered by it. CWE-863Apr 4, 2022 | CVSS6.0v3.1 | EPSS0.202% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-27608MEDIUM | Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the protection offered by it. CWE-863Apr 4, 2022 | CVSS6.0v3.1 | EPSS0.204% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |