Lucene search

ForcepointCVELIST:CVE-2024-2166

HistorySep 04, 2024 - 9:37 p.m.

CVE-2024-2166

2024-09-0421:37:17

CWE-79

forcepoint

www.cve.org

cve-2024-2166

cross-site scripting

forcepoint email security

reflected xss

email security 8.5.5 hf003

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.7%

JSON

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "modules": [
      "Real Time Monitor"
    ],
    "product": "Email Security",
    "vendor": "Forcepoint",
    "versions": [
      {
        "lessThan": "8.5.5 HF003",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

support.forcepoint.com/s/article/000042397

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.7%

JSON

Related for CVELIST:CVE-2024-2166