Forcepoint Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined7
Anti-Malware Software6
Cloud Software4
Firewall Software1
Data Loss Prevention Software1

Produkt

Forcepoint Cloud Security Gateway4
Forcepoint Email Security4
Forcepoint One Endpoint3
Forcepoint Web Security Content Gateway2
Forcepoint Next Generation Firewall Security Manag ...1

Przeciwdziałanie

Official Fix13
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined20

Wektor dostępu

Not Defined0
Physical0
Local2
Adjacent0
Network18

Uwierzytelnianie

Not Defined0
High2
Low6
None12

Interakcja z użytkownikiem

Not Defined0
Required7
None13

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤68
≤72
≤82
≤96
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤69
≤72
≤83
≤94
≤100

VulDB

≤10
≤20
≤30
≤40
≤510
≤61
≤74
≤84
≤91
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤74
≤81
≤91
≤105

CNA

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤81
≤92
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k5
<2k12
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k20
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (15): Cloud Security Gateway (4), Data Loss Prevention (1), Email Security (4), Email Security with DLP (1), FOne SmartEdge Agent (1), NGFW (1), NGFW Engine (1), NGFW Security Management Center (1), Next Generation Firewall Security Management Center (1), One Endpoint (3), One Endpoint with Policy Engine (1), VPN Client (1), Web Cloud Security Gateway (1), Web Security (1), Web Security Content Gateway (2)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-03-045.25.1Forcepoint Next Generation Firewall Security Management Center cross site scriptingFirewall SoftwareNot DefinedOfficial Fix0.000430.05CVE-2023-5451
2024-01-297.27.1Forcepoint FOne SmartEdge Agent bgAutoinstaller Service Modules privilege escalationNieznanyNot DefinedOfficial Fix0.000430.02CVE-2023-1705
2023-06-168.28.2Forcepoint Web Cloud Security Gateway Cloud Security Gateway Portal sql injectionCloud SoftwareNot DefinedNot Defined0.000760.00CVE-2023-2080
2023-03-305.25.1Forcepoint Cloud Security Gateway login_form.mhtml cross site scriptingCloud SoftwareNot DefinedOfficial Fix0.000630.00CVE-2023-26291
2023-03-305.25.1Forcepoint Cloud Security Gateway login_reset_request.mhtml cross site scriptingCloud SoftwareNot DefinedOfficial Fix0.000630.00CVE-2023-26290
2023-03-305.25.1Forcepoint Cloud Security Gateway login_submit.mhtml cross site scriptingCloud SoftwareNot DefinedOfficial Fix0.000630.00CVE-2023-26292
2022-09-138.28.1Forcepoint Data Loss Prevention Policy Engine XML External EntityData Loss Prevention SoftwareNot DefinedOfficial Fix0.002010.00CVE-2022-1700
2022-04-055.35.2Forcepoint One Endpoint privilege escalationNieznanyNot DefinedOfficial Fix0.000440.00CVE-2022-27609
2022-04-055.35.2Forcepoint One Endpoint Registry Key privilege escalationNieznanyNot DefinedOfficial Fix0.000440.00CVE-2022-27608
2021-10-054.34.3Forcepoint NGFW Engine HTTP User Response denial of serviceNieznanyNot DefinedNot Defined0.000890.00CVE-2021-41530

10 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 10 results.

◂ PoprzedniPrzeglądKolejny ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!