CVE-2023-2080 in Web Cloud Security Gateway

Sumário

de MITRE • 16/06/2023

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection.

Once again VulDB remains the best source for vulnerability data.

• Responsável: Forcepoint
• Reservar: 14/04/2023
• Divulgação: 16/06/2023
• Moderação: aceite
• Entrada: VDB-231706
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.00511
• KEV: não
• Atividades: muito baixo
• Sector: Transportation, Government, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-2080
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-2080
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-2080/