Forcepoint vulnerabilitiesNone on the known-exploited list.
Forcepoint has 22 published vulnerabilities across 19 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Email Security, with 8. If you run Forcepoint software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Forcepoint products have the most vulnerabilities?
Email Security leads with 8 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Forcepoint vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Forcepoint's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Forcepoint flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 10%CVE-2004-0112Medium
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause...
- 3.4%CVE-2018-16530Critical
A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service.
- 3.0%CVE-2019-6146Medium
It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection.
- 2.4%CVE-2019-6139Critical
Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001.
- 1.6%CVE-2018-16529Critical
A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x.
- 1.4%CVE-2019-6140Critical
A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration process is not completed.
- 1.1%CVE-2019-6143Critical
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass...
- 1.0%CVE-2020-6590High
Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.
- 1.0%CVE-2019-6144Medium
This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection.
- 0.9%CVE-2021-41530High
Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured.
All Forcepoint products we track.
18 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Email Securityemail_security8 vulnerabilities18 versions
- Web Securityweb_security5 vulnerabilities4 versions
- Cloud Security Gatewaycloud_security_gateway4 vulnerabilities1 version
- One Endpointone_endpoint3 vulnerabilities4 versions
- Data Loss Preventiondata_loss_prevention2 vulnerabilities1 version
- Next Generation Firewallnext_generation_firewall2 vulnerabilities43 versions
- Web Security Content Gatewayweb_security_content_gateway2 vulnerabilities1 version
- Next Generation Firewall Security Management Centernext_generation_firewall_security_management_center1 vulnerability41 versions
- One Smartedge Agentone_smartedge_agent1 vulnerability1 version
- Security Managersecurity_manager1 vulnerability2 versions
- Stonegatestonegate1 vulnerability18 versions
- User Iduser_id1 vulnerability5 versions
- VPN Clientvpn_client1 vulnerability2 versions
- Serverclusterservercluster0 vulnerabilities2 versions
- Stonebeat Fullclusterstonebeat_fullcluster0 vulnerabilities5 versions
- Stonebeat Securityclusterstonebeat_securitycluster0 vulnerabilities2 versions
- Stonebeat Webclusterstonebeat_webcluster0 vulnerabilities2 versions
- Stonegate VPN Clientstonegate_vpn_client0 vulnerabilities6 versions
This directory lists the 18 Forcepoint products with at least one tracked version, of 19 in our catalogue.
Running Forcepoint? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
- Matched to
- Forcepoint on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 22 published vulnerabilities across 19 products and 158 versions from Forcepoint.
None of Forcepoint's vulnerabilities is on the list of flaws known to be exploited today.
Email Security, with 8 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Forcepoint products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.