Lucene search

ForcepointCVE-2024-2166

HistorySep 04, 2024 - 10:15 p.m.

CVE-2024-2166

2024-09-0422:15:04

CWE-79

forcepoint

web.nvd.nist.gov

forcepoint email security

cross-site scripting

reflected xss

input neutralization

cve-2024-2166

real time monitor modules

version 8.5.5 hf003

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003.

Affected configurations

Nvd

Node

forcepointemail_securityRange<8.5.5

forcepointemail_securityMatch8.5.5-

VendorProductVersionCPE
forcepointemail_security*cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*
forcepointemail_security8.5.5cpe:2.3:a:forcepoint:email_security:8.5.5:-:*:*:*:*:*:*

Vendor	Product	Version	CPE
forcepoint	email_security	*	cpe:2.3:a:forcepoint:email_security::::::::
forcepoint	email_security	8.5.5	cpe:2.3:a:forcepoint:email_security:8.5.5:-::::::

CNA Affected

[
  {
    "defaultStatus": "affected",
    "modules": [
      "Real Time Monitor"
    ],
    "product": "Email Security",
    "vendor": "Forcepoint",
    "versions": [
      {
        "lessThan": "8.5.5 HF003",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

support.forcepoint.com/s/article/000042397

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-2166