Skyhigh vulnerabilities
4 vulnerabilities
Known vulnerabilities in Skyhigh products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Skyhigh Client Proxy3 vulnerabilities
- Secure Web Gateway1 vulnerabilities
CVE-2024-0312skyhighskyhigh client proxy
EPSS score0.16%
A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.CVE-2024-0313skyhighskyhigh client proxyEPSS score0.18%
A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could target it and undo the bypass, thereby denying the victim access to the update service, causing it to fail.CVE-2024-0311skyhighskyhigh client proxyEPSS score0.42%
A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.CVE-2024-6398skyhighsecure web gateway+1EPSS score0.33%
An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party websites due to Same Origin Policy Bypass of browsers in certain scenarios. The risk is low, because other recommended default security policies such as URL categorization and GTI are in place in most policies to block access to uncategorized/high risk websites. Any information disclosed depends on how the customers have customized the block pages.