CVE-2024-9103

MEDIUM

Persistent XSS in blocked messages

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-9103 has a selected CVSS score of 6.1 (medium).

Description

Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security (Blocked Messages module) allows Stored XSS. This issue affects Email Security through 8.5.5.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 24, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Email Security

Browse Forcepoint / Email Security

Default status: unaffected

CVE ListThrough 8.5.5affected

References

2