Forcepoint Vulnerabilities and Affected Products
Vulnerabilities associated with email_security.
Products
Clear product- Cloud Security Gateway (CSG)4 vulnerabilities
- Forcepoint Email Security4 vulnerabilities
- Web Security4 vulnerabilities
- Email Security2 vulnerabilities
- One Endpoint2 vulnerabilities
- Cloud Security Gateway1 vulnerability
- Data Loss Prevention (DLP)1 vulnerability
- Email Security with DLP enabled1 vulnerability
- email_security1 vulnerability
- F1E mac1 vulnerability
- FIE Endpoint1 vulnerability
- Forcepoint Next Generation Firewall1 vulnerability
- Forcepoint One Endpoint (F1E)1 vulnerability
- Forcepoint VPN Client for Windows1 vulnerability
- F|One SmartEdge Agent1 vulnerability
- Next Generation Firewall Security Management Center1 vulnerability
- NGFW Engine1 vulnerability
- NGFW Security Management Center1 vulnerability
- One Endpoint (F1E) with Policy Engine1 vulnerability
- VPN Client1 vulnerability
- Web Security (On-Prem)1 vulnerability
- Web Security Content Gateway1 vulnerability
- web_security1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-2166HIGH | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003. CWE-79Sep 4, 2024 | CVSS8.8v3.1 | EPSS0.312% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |