Forcepoint vulnerabilities
32 vulnerabilities
Known vulnerabilities in Forcepoint products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 30 products.
Products
30- Email Security9 vulnerabilities
- Web Security7 vulnerabilities
- Cloud Security Gateway4 vulnerabilities
- Forcepoint Email Security4 vulnerabilities
- Cloud Security Gateway (Csg)3 vulnerabilities
- Next Generation Firewall3 vulnerabilities
- One Endpoint3 vulnerabilities
- Data Loss Prevention2 vulnerabilities
- Next Generation Firewall Security Management Center2 vulnerabilities
- Vpn Client2 vulnerabilities
- Web Security Content Gateway2 vulnerabilities
- Data Loss Prevention (Dlp)1 vulnerabilities
- Email Security With DLP Enabled1 vulnerabilities
- F1E Mac1 vulnerabilities
- FIE Endpoint1 vulnerabilities
- F|One Smartedge Agent1 vulnerabilities
- Forcepoint Next Generation Firewall1 vulnerabilities
- Forcepoint One Endpoint (F1E)1 vulnerabilities
- Forcepoint Security Engine (Ngfw)1 vulnerabilities
- Forcepoint VPN Client For Windows1 vulnerabilities
- NGFW Engine1 vulnerabilities
- NGFW Security Management Center1 vulnerabilities
- One Data Loss Prevention1 vulnerabilities
- One Endpoint (F1E) With Policy Engine1 vulnerabilities
- One Endpoint With Policy Engine1 vulnerabilities
- One Smartedge Agent1 vulnerabilities
- Security Manager1 vulnerabilities
- Stonegate1 vulnerabilities
- User Id1 vulnerabilities
- Web Security (On Prem)1 vulnerabilities
CVE-2018-16530forcepointemail_security+1
EPSS score3.44%
A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service. While no known Remote Code Execution (RCE) vulnerabilities exist, as with all buffer overflows, the possibility of RCE cannot be completely ruled out. Data Execution Protection (DEP) is already enabled on the Email appliance as a risk mitigation.CVE-2018-16529forcepointemail_security+1EPSS score1.56%
A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.CVE-2021-41530forcepointnext_generation_firewallEPSS score0.93%
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured.CVE-2025-2272forcepointfie endpointEPSS score0.17%
Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, Hijacking a privileged process.This issue affects FIE Endpoint: before 25.05.CVE-2025-2274forcepointweb_security+1EPSS score0.17%
Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.CVE-2025-14026forcepointforcepoint one endpoint (f1e)+1EPSS score0.21%
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.CVE-2025-12694forcepointvpn_clientEPSS score0.10%
A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior.CVE-2025-12690forcepointnext_generation_firewall+1EPSS score0.13%
Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, through 7.2.4, through 7.1.10.CVE-2020-6590forcepointdata_loss_prevention+2EPSS score1.05%
Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.CVE-2022-1700forcepointcloud_security_gateway+7EPSS score0.81%
Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This issue affects: Forcepoint Data Loss Prevention (DLP) versions prior to 8.8.2. Forcepoint One Endpoint (F1E) with Policy Engine versions prior to 8.8.2. Forcepoint Web Security Content Gateway versions prior to 8.5.5. Forcepoint Email Security with DLP enabled versions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022.CVE-2022-27608forcepointone_endpointEPSS score0.21%
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti-tampering mechanisms which would then allow the user to disable Forcepoint One Endpoint and the protection offered by it.CVE-2022-27609forcepointone_endpointEPSS score0.21%
Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges. This could result in a user disabling Forcepoint One Endpoint and the protection offered by it.CVE-2004-01124dwebstar+54EPSS score10.42%
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.CVE-2024-2166forcepointemail_securityEPSS score0.31%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003.CVE-2024-9103forcepointemail_securityEPSS score0.23%
Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security (Blocked Messages module) allows Stored XSS.
This issue affects Email Security through 8.5.5.CVE-2019-6144forcepointone_endpointEPSS score0.97%
This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection.CVE-2019-6143forcepointforcepoint next generation firewall+1EPSS score1.13%
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. The vulnerability does not apply when any other backend authentication is used. The RADIUS authentication method is not vulnerable, for example.CVE-2019-6147forcepointnext_generation_firewall_security_management_center+1EPSS score0.70%
Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next Generation Firewall (NGFW), possibly resulting in settings that are weaker than expected. All SMC versions lower than 6.5.12 or 6.7.1 are vulnerable.CVE-2019-6146forcepointweb_securityEPSS score2.98%
It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium) (/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)CVE-2019-6140forcepointemail_security+1EPSS score1.39%
A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration process is not completed.