320 matches found
CVE-2022-27609
CVE-2022-27609 affects Forcepoint One Endpoint prior to version 22.01 on Windows. The vulnerability stems from insufficient anti-tampering protection of services by users with Administrator privileges, enabling a user to disable Forcepoint One Endpoint and its protection. Connected sources corrob...
CVE-2022-27608
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the...
CVE-2022-27608
Forcepoint One Endpoint on Windows (pre-22.01) is vulnerable to registry key tampering by Administrator users, enabling them to disable anti-tampering and the protection. Affected product: Forcepoint One Endpoint; root cause: registry tampering leading to disabled protection; impact: attacker cou...
Forcepoint One Endpoint security vulnerability
Forcepoint One Endpoint is a data leakage prevention solution from US-based Forcepoint. A security vulnerability exists in Forcepoint One Endpoint for Microsoft Windows, versions prior to 22.01, which stems from an inability to provide adequate service tamper protection for users with administrat...
PT-2022-18512
Name of the Vulnerable Software and Affected Versions Forcepoint One Endpoint versions prior to 22.01 Description The issue allows users with Administrator privileges to tamper with registry keys, potentially disabling anti-tampering mechanisms. This could enable a user to disable Forcepoint One...
Forcepoint One Endpoint security vulnerability
Forcepoint One Endpoint is a data leakage prevention solution from US-based Forcepoint. A security vulnerability exists in Forcepoint One Endpoint for Microsoft Windows prior to version 22.01, which originates from an attacker with administrator privileges tampering with the registry, causing the...
PT-2022-18513
Name of the Vulnerable Software and Affected Versions Forcepoint One Endpoint versions prior to 22.01 Description The issue concerns insufficient anti-tampering protection of services by users with Administrator privileges. This could result in a user disabling the endpoint protection...
CVE-2022-27608: Incorrect Authorization
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the...
CVE-2022-27609: Incorrect Authorization
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges. This could result in a user disabling Forcepoint One Endpoint and the protection offered by it...
CVE-2021-41530
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured...
CVE-2021-41530
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured...
Design/Logic Flaw
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured...
CVE-2021-41530
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured...
CVE-2021-41530
CVE-2021-41530 affects Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0, which are vulnerable to a TCP reflected amplification vulnerability when HTTP User Response is configured. The condition and vulnerability type are described in NVD/NVD-derived records; no ex...
CVE-2021-41530
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured...
Forcepoint NGFW Engine security vulnerabilities
Forcepoint NGFW Engine is a next-generation firewall solution from Forcepoint Corporation. A security vulnerability exists in Forcepoint NGFW Engine that originates from a TCP reflection amplification vulnerability in the affected software if the user configures HTTP User Response...
PT-2021-23319
Name of the Vulnerable Software and Affected Versions Forcepoint NGFW Engine versions 6.5.11 and earlier Forcepoint NGFW Engine versions 6.8.6 and earlier Forcepoint NGFW Engine version 6.10.0 Description The issue is related to TCP reflected amplification, which occurs when HTTP User Response ha...
CVE-2021-41530: Undefined Security Weakness
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured...
Vulnerability fixed in Forcepoint Web Security
A vulnerability has been fixed in Forcepoint Web Security. A malicious party can exploit the vulnerability to launch an XML External Entity Injection XXE attack when processing of XML data. An external attacker could exploit it to obtain sensitive information. Forcepoint has released updates to...