Web Security vulnerabilities

2 known vulnerabilities in Web Security from Forcepoint. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  Web Security: Improper Neutralization of Input During Web Page Generation

  CVE-2023-6452Aug 22, 2024Forcepoint

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS. The Forcepoint Web Security portal allows administrators to generate detailed reports on user

• 9.8 Critical severity

  Cloud Security Gateway (CSG): Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-2080Jun 15, 2023Forcepoint

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection.