CVE-2023-26291

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Cloud Security Gateway CSG Portal on Web Cloud Security Gateway, Email Security Cloud loginform.mhtml modules, Forcepoint Web Security Portal on Hybrid loginform.mhtml modules allows...

CVE-2023-26291

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Cloud Security Gateway CSG Portal on Web Cloud Security Gateway, Email Security Cloud loginform.mhtml modules, Forcepoint Web Security Portal on Hybrid loginform.mhtml modules allows...

CVE-2023-26291

CVE-2023-26291 affects Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud, and Forcepoint Web Security Portal on Hybrid. The issue is an improper neutralization of input during web page generation, enabling reflected Cross-Site Scripting via the log...

CVE-2023-26290

The CVE describes a Reflected Cross-Site Scripting (XSS) in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway and related Web/Web Security Portal components (login_reset_request.mhtml modules) that could allow an attacker to execute script in a victim’s browser. Root ca...

CVE-2023-26290

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Cloud Security Gateway CSG Portal on Web Cloud Security Gateway, Email Security Cloud loginresetrequest.mhtml modules, Forcepoint Web Security Portal on Hybrid loginresetrequest.mhtml...

CVE-2023-26290

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Cloud Security Gateway CSG Portal on Web Cloud Security Gateway, Email Security Cloud loginresetrequest.mhtml modules, Forcepoint Web Security Portal on Hybrid loginresetrequest.mhtml...

CVE-2022-1700

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in the Policy Engine of Forcepoint Data Loss Prevention DLP, which is also leveraged by Forcepoint One Endpoint F1E, Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20...

CVE-2022-1700

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in the Policy Engine of Forcepoint Data Loss Prevention DLP, which is also leveraged by Forcepoint One Endpoint F1E, Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20...

CVE-2022-1700

CVE-2022-1700 is an XXE vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP). The XML parser was configured to allow external entities/DTDs, affecting DLP versions before 8.8.2 and related products: Forcepoint One Endpoint (Policy Engine before 8.8.2), Forcepoint Web Securi...

PT-2022-14056 · Forcepoint · Forcepoint Email Security +4

Name of the Vulnerable Software and Affected Versions: Forcepoint Data Loss Prevention DLP versions prior to 8.8.2 Forcepoint One Endpoint F1E with Policy Engine versions prior to 8.8.2 Forcepoint Web Security Content Gateway versions prior to 8.5.5 Forcepoint Email Security with DLP enabled...