Log in Start free

Forcepoint

Products

ProductCVEsExploitedLatest
Web Security4–Aug 22, 2024
Cloud Security Gateway (CSG)4–Jun 15, 2023
Email Security2–Mar 24, 2025
One Endpoint2–Apr 4, 2022
FIE Endpoint1–May 22, 2025
F|One SmartEdge Agent1–Jan 29, 2024
Forcepoint One Endpoint (F1E)1–Jan 6, 2026
Forcepoint Security Engine (NGFW)1–Sep 23, 2026
Next Generation Firewall Security Management Center 1–Mar 4, 2024
NGFW Engine1–Mar 11, 2026
One Endpoint (F1E) with Policy Engine1–Sep 12, 2022
VPN Client1–Jun 4, 2026
Web Security Content Gateway1–Sep 12, 2022
Cloud Security Gateway1–Sep 12, 2022
Web Security (On-Prem)1–Mar 16, 2026
Data Loss Prevention (DLP)1–Sep 12, 2022
Email Security with DLP enabled1–Sep 12, 2022
F1E mac1–Aug 13, 2026

Exploited and recent CVEs

  • CVE-2026-12974 High 7.9 Security Policy Bypass in Forcepoint Security Engine (NGFW) 0.5%
  • CVE-2026-11970 Medium 4.8 This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758. 0.2%
  • CVE-2025-12694 High 8.5 Local Privilege Escalation in VPN Client 0.1%
  • CVE-2025-2274 Medium 4.8 Stored Cross Site Scripting in Forcepoint Web Security 0.2%
  • CVE-2025-12690 High 7.3 Local Privilege Escalation in NGFW Engine 0.1%
  • CVE-2025-14026 High 7.8 Vulnerable Python version used in Forcepoint One DLP Client 0.2%
  • CVE-2025-2272 High 7.0 Privilege Escalation and Arbitrary code execution in F1E Endpoint 0.2%
  • CVE-2024-9103 Medium 6.1 Persistent XSS in blocked messages 0.2%
  • CVE-2024-2166 High 8.8 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Emai 0.3%
  • CVE-2023-6452 Critical 9.6 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS. The Forcepoint Web Security 0.4%
  • CVE-2023-5451 Medium 6.1 Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads. Improper Neutraliza 0.3%
  • CVE-2023-1705 High 8.4 Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escalation, Functionality Bypass.This issue affects F|One SmartEdg 0.1%
  • CVE-2023-2080 High 8.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud 0.5%
  • CVE-2023-26292 Medium 6.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud 0.4%
  • CVE-2023-26292 Medium 6.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud 0.4%
  • CVE-2023-26291 Medium 6.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud 0.4%
  • CVE-2023-26291 Medium 6.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud 0.4%
  • CVE-2023-26290 Medium 6.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud 0.4%
  • CVE-2023-26290 Medium 6.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud 0.4%
  • CVE-2022-1700 High 7.5 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web 0.8%
  • CVE-2022-1700 High 7.5 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web 0.8%
  • CVE-2022-1700 High 7.5 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web 0.8%
  • CVE-2022-1700 High 7.5 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web 0.8%
  • CVE-2022-1700 High 7.5 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web 0.8%
  • CVE-2022-27609 Medium 6.0 Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator privileges. This could resul 0.2%
  • CVE-2022-27608 Medium 6.0 Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges. This could result in a user disabling anti 0.2%