Web Security (Forcepoint) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-03-16. Vendor: Forcepoint.

CVEs of Web Security

• CVE-2025-2274 - CVSS 6.1 (medium), 2026-03-16: Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security…
• CVE-2023-6452 - CVSS 9.6 (critical), 2024-08-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows…
• CVE-2023-2080 - CVSS 9.8 (critical), 2023-06-15: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…
• CVE-2023-26292 - CVSS 6.1 (medium), 2023-03-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…
• CVE-2023-26291 - CVSS 6.1 (medium), 2023-03-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…
• CVE-2023-26290 - CVSS 6.1 (medium), 2023-03-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…
• CVE-2019-6146 - CVSS 6.1 (medium), 2020-01-22: It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium)…