[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh5hVrVH58hNV5QTbol2ILmK0CsQa7ywYHhquqf7nSpc":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":295,"kevVulnerabilities":352,"topProductsByCves":365,"seoMetadata":376,"meta":385},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":294},5187,"checkpoint",73,128,3,376,"2025-08-06","c",[16,23,28,32,37,44,49,55,58,63,68,72,76,79,82,86,89,93,97,101,104,107,111,115,120,124,128,132,136,139,143,147,151,155,158,161,164,168,172,175,179,183,186,189,193,197,200,203,206,210,213,216,220,224,228,232,235,238,241,245,248,252,255,258,262,266,270,273,277,281,285,288,291],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},20045,"firewall-1",13,43,0,"2006-07-27",{"id":24,"product_name":25,"version_count":26,"cve_count":26,"kev_count":21,"last_cve_update":27},20085,"vpn-1",14,"2011-10-05",{"id":29,"product_name":30,"version_count":20,"cve_count":26,"kev_count":21,"last_cve_update":31},20039,"endpoint_security","2023-11-12",{"id":33,"product_name":34,"version_count":35,"cve_count":26,"kev_count":21,"last_cve_update":36},20096,"zonealarm",46,"2022-09-27",{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":42,"last_cve_update":43},20080,"security_gateway",15,8,2,"2019-10-02",{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":21,"last_cve_update":13},20048,"gaia_os",17,7,{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":21,"last_cve_update":54},20075,"remote_access_clients",5,4,"2019-08-29",{"id":56,"product_name":57,"version_count":53,"cve_count":53,"kev_count":21,"last_cve_update":27},20037,"connectra_ngx",{"id":59,"product_name":60,"version_count":61,"cve_count":53,"kev_count":21,"last_cve_update":62},20098,"zonealarm_extreme_security",71,"2024-11-22",{"id":64,"product_name":65,"version_count":21,"cve_count":53,"kev_count":66,"last_cve_update":67},20069,"quantum_security_gateway",1,"2024-11-07",{"id":69,"product_name":70,"version_count":66,"cve_count":53,"kev_count":21,"last_cve_update":71},20067,"provider-1","2004-11-23",{"id":73,"product_name":74,"version_count":21,"cve_count":53,"kev_count":21,"last_cve_update":75},20071,"quantum_security_management","2025-02-06",{"id":77,"product_name":78,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":75},20062,"multi-domain_management",{"id":80,"product_name":81,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":13},20060,"mobile_access",{"id":83,"product_name":84,"version_count":42,"cve_count":11,"kev_count":21,"last_cve_update":85},20040,"endpoint_security_clients","2019-12-23",{"id":87,"product_name":88,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":13},20076,"remote_access_vpn",{"id":90,"product_name":91,"version_count":42,"cve_count":42,"kev_count":21,"last_cve_update":92},20078,"secureclient_ng","2005-12-08",{"id":94,"product_name":95,"version_count":42,"cve_count":42,"kev_count":21,"last_cve_update":96},20054,"identity_agent","2024-04-18",{"id":98,"product_name":99,"version_count":52,"cve_count":42,"kev_count":66,"last_cve_update":100},20070,"quantum_security_gateway_firmware","2024-05-28",{"id":102,"product_name":103,"version_count":66,"cve_count":42,"kev_count":21,"last_cve_update":54},20030,"capsule_docs_standalone_client",{"id":105,"product_name":106,"version_count":21,"cve_count":42,"kev_count":66,"last_cve_update":67},20073,"quantum_spark",{"id":108,"product_name":109,"version_count":52,"cve_count":42,"kev_count":21,"last_cve_update":110},20049,"gaia_portal","2023-07-26",{"id":112,"product_name":113,"version_count":21,"cve_count":42,"kev_count":21,"last_cve_update":114},20065,"next_generation","2004-07-07",{"id":116,"product_name":117,"version_count":118,"cve_count":42,"kev_count":21,"last_cve_update":119},20082,"smartconsole",9,"2025-06-19",{"id":121,"product_name":122,"version_count":41,"cve_count":42,"kev_count":21,"last_cve_update":123},20084,"ssl_network_extender","2022-11-30",{"id":125,"product_name":126,"version_count":11,"cve_count":42,"kev_count":21,"last_cve_update":127},20086,"vpn-1_firewall-1","2008-03-20",{"id":129,"product_name":130,"version_count":53,"cve_count":42,"kev_count":21,"last_cve_update":131},20092,"vpn-1_secureclient","2008-02-08",{"id":133,"product_name":134,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":135},20072,"quantum_security_management_firmware","2021-03-25",{"id":137,"product_name":138,"version_count":53,"cve_count":66,"kev_count":66,"last_cve_update":100},20074,"quantum_spark_firmware",{"id":140,"product_name":141,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":142},20077,"sandblast_agent_for_browsers","2021-10-22",{"id":144,"product_name":145,"version_count":21,"cve_count":66,"kev_count":21,"last_cve_update":146},20081,"session_authentication_agent","2014-01-26",{"id":148,"product_name":149,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":150},20083,"smartconsole_for_endpoint_security_server","2019-06-20",{"id":152,"product_name":153,"version_count":41,"cve_count":66,"kev_count":21,"last_cve_update":154},20088,"vpn-1_firewall-1_next_generation","2005-11-18",{"id":156,"product_name":157,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":27},20089,"vpn-1_firewall-1_vsx",{"id":159,"product_name":160,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":127},20090,"vpn-1_power_utm",{"id":162,"product_name":163,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":127},20091,"vpn-1_power_utm_with_ngx",{"id":165,"product_name":166,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":167},20101,"zonealarm_security_suite","2005-12-31",{"id":169,"product_name":170,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":171},20031,"capsule_workspace","2022-07-18",{"id":173,"product_name":174,"version_count":21,"cve_count":66,"kev_count":21,"last_cve_update":154},20032,"check_point",{"id":176,"product_name":177,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":178},20033,"check_point_integrity_client","2005-02-11",{"id":180,"product_name":181,"version_count":52,"cve_count":66,"kev_count":21,"last_cve_update":182},20034,"check_point_vpn","2002-08-12",{"id":184,"product_name":185,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":127},20035,"check_point_vpn-1_pro",{"id":187,"product_name":188,"version_count":52,"cve_count":66,"kev_count":66,"last_cve_update":100},20036,"cloudguard_network_security",{"id":190,"product_name":191,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":192},20038,"endpoint_connect","2012-06-19",{"id":194,"product_name":195,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":196},20041,"endpoint_security_mi_server_r73","2014-01-22",{"id":198,"product_name":199,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":150},20042,"endpoint_security_server_package",{"id":201,"product_name":202,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":192},20043,"endpoint_security_vpn",{"id":204,"product_name":205,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":154},20044,"express",{"id":207,"product_name":208,"version_count":21,"cve_count":66,"kev_count":21,"last_cve_update":209},20046,"firewall-1_pki_web_service","2009-04-02",{"id":211,"product_name":212,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":43},20047,"gaia",{"id":214,"product_name":215,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":142},20050,"harmony_browse",{"id":217,"product_name":218,"version_count":41,"cve_count":66,"kev_count":21,"last_cve_update":219},20051,"harmony_endpoint","2022-07-07",{"id":221,"product_name":222,"version_count":53,"cve_count":66,"kev_count":21,"last_cve_update":223},20053,"ica_management_portal","2020-09-24",{"id":225,"product_name":226,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":227},20055,"ipsec_vpn","2019-04-09",{"id":229,"product_name":230,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":231},20056,"ipso_os","2014-01-23",{"id":233,"product_name":234,"version_count":21,"cve_count":66,"kev_count":21,"last_cve_update":150},20057,"jumbo_hotfix_for_endpoint_security_server",{"id":236,"product_name":237,"version_count":11,"cve_count":66,"kev_count":21,"last_cve_update":13},20058,"log_server",{"id":239,"product_name":240,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":146},20059,"management_server",{"id":242,"product_name":243,"version_count":52,"cve_count":66,"kev_count":21,"last_cve_update":244},20061,"mobile_access_portal_agent","2021-10-19",{"id":246,"product_name":247,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":135},20063,"multi-domain_management_firmware",{"id":249,"product_name":250,"version_count":52,"cve_count":66,"kev_count":21,"last_cve_update":251},20064,"multi-domain_management\\\u002Fprovider-1","2011-07-08",{"id":253,"product_name":254,"version_count":42,"cve_count":66,"kev_count":21,"last_cve_update":114},20066,"ng-ai",{"id":256,"product_name":257,"version_count":21,"cve_count":66,"kev_count":21,"last_cve_update":67},20068,"quantum_6700",{"id":259,"product_name":260,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":261},20095,"web_intelligence","2007-05-16",{"id":263,"product_name":264,"version_count":118,"cve_count":66,"kev_count":21,"last_cve_update":265},20097,"zonealarm_anti-ransomware","2020-08-04",{"id":267,"product_name":268,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":269},20100,"zonealarm_pro","2001-08-29",{"id":271,"product_name":272,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":150},20029,"capsule_docs",{"id":274,"product_name":275,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":276},20093,"vpn-1_utm_edge","2007-06-29",{"id":278,"product_name":279,"version_count":66,"cve_count":66,"kev_count":21,"last_cve_update":280},20094,"vpn-1_utm_edge_w_embedded_ngx","2008-03-08",{"id":282,"product_name":283,"version_count":66,"cve_count":21,"kev_count":21,"last_cve_update":284},20087,"vpn-1_firewall_1",null,{"id":286,"product_name":287,"version_count":21,"cve_count":21,"kev_count":21,"last_cve_update":284},20079,"secure_platform_ng",{"id":289,"product_name":290,"version_count":19,"cve_count":21,"kev_count":21,"last_cve_update":284},20099,"zonealarm_extreme_security_nextgen",{"id":292,"product_name":293,"version_count":21,"cve_count":21,"kev_count":21,"last_cve_update":284},20052,"harmony_sase","Checkpoint is a technology vendor with 73 tracked products and 128 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[296,304,310,315,322,328,333,339,343,347],{"cveId":297,"description":298,"publishedDate":299,"cvssScore":300,"cvssVersion":301,"severity":302,"isKev":4,"epssScore":303},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":305,"description":306,"publishedDate":100,"cvssScore":307,"cvssVersion":301,"severity":308,"isKev":4,"epssScore":309},"CVE-2024-24919","Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.",8.6,"High",0.99978,{"cveId":311,"description":312,"publishedDate":313,"cvssScore":300,"cvssVersion":301,"severity":302,"isKev":4,"epssScore":314},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":316,"description":317,"publishedDate":135,"cvssScore":318,"cvssVersion":301,"severity":319,"isKev":320,"epssScore":321},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).",5.9,"Medium",false,0.63542,{"cveId":323,"description":324,"publishedDate":325,"cvssScore":52,"cvssVersion":326,"severity":319,"isKev":320,"epssScore":327},"CVE-2002-1623","The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote.","2002-12-31","v2",0.48573,{"cveId":329,"description":330,"publishedDate":244,"cvssScore":331,"cvssVersion":301,"severity":308,"isKev":320,"epssScore":332},"CVE-2021-30358","Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.",7.2,0.27466,{"cveId":334,"description":335,"publishedDate":336,"cvssScore":337,"cvssVersion":301,"severity":319,"isKev":320,"epssScore":338},"CVE-2021-30357","SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.","2021-06-08",5.3,0.22792,{"cveId":340,"description":341,"publishedDate":110,"cvssScore":331,"cvssVersion":301,"severity":308,"isKev":320,"epssScore":342},"CVE-2023-28130","Local user may lead to privilege escalation using Gaia Portal hostnames page.",0.20871,{"cveId":344,"description":345,"publishedDate":227,"cvssScore":318,"cvssVersion":301,"severity":319,"isKev":320,"epssScore":346},"CVE-2019-8456","Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server.",0.2039,{"cveId":348,"description":349,"publishedDate":171,"cvssScore":350,"cvssVersion":301,"severity":308,"isKev":320,"epssScore":351},"CVE-2022-23745","A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but could not be used to gather any sensitive information.",7.5,0.16912,[353,358,363],{"cveId":305,"description":306,"publishedDate":100,"cvssScore":307,"cvssVersion":301,"severity":308,"isKev":4,"epssScore":309,"cisaVulnName":354,"cisaDateAdded":355,"cisaShortDescription":356,"cisaRequiredAction":357},"Check Point Quantum Security Gateways Information Disclosure Vulnerability","2024-05-30","Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":297,"description":298,"publishedDate":299,"cvssScore":300,"cvssVersion":301,"severity":302,"isKev":4,"epssScore":303,"cisaVulnName":359,"cisaDateAdded":360,"cisaShortDescription":361,"cisaRequiredAction":362},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":311,"description":312,"publishedDate":313,"cvssScore":300,"cvssVersion":301,"severity":302,"isKev":4,"epssScore":314,"cisaVulnName":359,"cisaDateAdded":360,"cisaShortDescription":364,"cisaRequiredAction":362},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",[366,367,368,369,370,371,372,373,374,375],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":25,"version_count":26,"cve_count":26,"kev_count":21,"last_cve_update":27},{"id":29,"product_name":30,"version_count":20,"cve_count":26,"kev_count":21,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":26,"kev_count":21,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":42,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":21,"last_cve_update":13},{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":21,"last_cve_update":54},{"id":56,"product_name":57,"version_count":53,"cve_count":53,"kev_count":21,"last_cve_update":27},{"id":59,"product_name":60,"version_count":61,"cve_count":53,"kev_count":21,"last_cve_update":62},{"id":64,"product_name":65,"version_count":21,"cve_count":53,"kev_count":66,"last_cve_update":67},{"title":377,"metaDescription":378,"keywords":379,"structuredData":380},"Checkpoint - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Checkpoint covering 73 products with 128 tracked vulnerabilities including 2 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Checkpoint vulnerabilities, Checkpoint security, Checkpoint CVE, Checkpoint threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Checkpoint KEV, Checkpoint exploited vulnerabilities",{"@context":381,"@type":382,"name":383,"description":378,"url":384},"https:\u002F\u002Fschema.org","Organization","Checkpoint","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcheckpoint",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":386,"apiVersion":387},"2026-10-17T20:20:48.567Z","3.0"]