Forcepoint Vulnerabilities and Affected Products
Vulnerabilities associated with Web Security Content Gateway.
Products
Clear product- Cloud Security Gateway (CSG)4 vulnerabilities
- Forcepoint Email Security4 vulnerabilities
- Web Security4 vulnerabilities
- Email Security2 vulnerabilities
- One Endpoint2 vulnerabilities
- Cloud Security Gateway1 vulnerability
- Data Loss Prevention (DLP)1 vulnerability
- Email Security with DLP enabled1 vulnerability
- email_security1 vulnerability
- F1E mac1 vulnerability
- FIE Endpoint1 vulnerability
- Forcepoint Next Generation Firewall1 vulnerability
- Forcepoint One Endpoint (F1E)1 vulnerability
- Forcepoint VPN Client for Windows1 vulnerability
- F|One SmartEdge Agent1 vulnerability
- Next Generation Firewall Security Management Center1 vulnerability
- NGFW Engine1 vulnerability
- NGFW Security Management Center1 vulnerability
- One Endpoint (F1E) with Policy Engine1 vulnerability
- VPN Client1 vulnerability
- Web Security (On-Prem)1 vulnerability
- Web Security Content Gateway1 vulnerability
- web_security1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-1700HIGH | Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This is… CWE-611Sep 12, 2022 | CVSS7.5v3.1 | EPSS0.715% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |