Forcepoint Vulnerabilities and Affected Products
Vulnerabilities associated with Web Security (On-Prem).
Products
Clear product- Cloud Security Gateway (CSG)4 vulnerabilities
- Forcepoint Email Security4 vulnerabilities
- Web Security4 vulnerabilities
- Email Security2 vulnerabilities
- One Endpoint2 vulnerabilities
- Cloud Security Gateway1 vulnerability
- Data Loss Prevention (DLP)1 vulnerability
- Email Security with DLP enabled1 vulnerability
- email_security1 vulnerability
- F1E mac1 vulnerability
- FIE Endpoint1 vulnerability
- Forcepoint Next Generation Firewall1 vulnerability
- Forcepoint One Endpoint (F1E)1 vulnerability
- Forcepoint VPN Client for Windows1 vulnerability
- F|One SmartEdge Agent1 vulnerability
- Next Generation Firewall Security Management Center1 vulnerability
- NGFW Engine1 vulnerability
- NGFW Security Management Center1 vulnerability
- One Endpoint (F1E) with Policy Engine1 vulnerability
- VPN Client1 vulnerability
- Web Security (On-Prem)1 vulnerability
- Web Security Content Gateway1 vulnerability
- web_security1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-2274MEDIUM | Stored Cross Site Scripting in Forcepoint Web SecurityImproper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6. CWE-79Mar 16, 2026 | CVSS4.8v4.0 | EPSS0.16% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |