Email Security vulnerabilities

2 known vulnerabilities in Email Security from Forcepoint. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Cloud Security Gateway (CSG): Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-2080Jun 15, 2023Forcepoint

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection.

• 9.8 Critical severity

  Data Loss Prevention (DLP): Improper Restriction of XML External Entity Reference

  CVE-2022-1700Sep 12, 2022Forcepoint

  Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled,