Forcepoint vulnerabilities
27 CVEs and advisories name Forcepoint as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-12974Security Policy Bypass in Forcepoint Security Engine (NGFW)
- CVE-2026-11970This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E
- CVE-2025-12694Local Privilege Escalation in VPN Client
- CVE-2025-2274Stored Cross Site Scripting in Forcepoint Web Security
- CVE-2025-12690Local Privilege Escalation in NGFW Engine
- CVE-2025-14026Vulnerable Python version used in Forcepoint One DLP Client
- CVE-2025-2272Privilege Escalation and Arbitrary code execution in F1E Endpoint
- CVE-2024-9103Persistent XSS in blocked messages
- CVE-2024-2166Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time M
- CVE-2023-6452Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction V
- CVE-2023-5451Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client down
- CVE-2023-1705Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escala
- CVE-2023-2080Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG
- CVE-2023-26292Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG
- CVE-2023-26291Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG
- CVE-2023-26290Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG
- CVE-2022-1700Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), w
- CVE-2022-27609Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of servi
- CVE-2022-27608Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administ
- CVE-2019-6147Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can co
- CVE-2019-6142It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3.
- CVE-2019-6145Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability.
- CVE-2019-6143Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentic
- CVE-2019-6140A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hyb
- CVE-2018-16530A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a p
- CVE-2018-16529A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x.
- CVE-2019-6139Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001.