Login Request a demo
FO
Vendor
Forcepoint
23 products with CVEs on record
48
CVEs
0
On KEV
0
New 30D
Products
ES
Email Security
Forcepoint
9.8
9 CVEs0 on KEV0 new
WS
Web Security
Forcepoint
9.8
7 CVEs0 on KEV0 new
CS
Cloud Security Gateway
Forcepoint
9.8
4 CVEs0 on KEV0 new
NG
Next Generation Firewall
Forcepoint
9.1
3 CVEs0 on KEV0 new
OE
One Endpoint
Forcepoint
6.5
3 CVEs0 on KEV0 new
DL
Data Loss Prevention
Forcepoint
9.8
2 CVEs0 on KEV0 new
NG
Next Generation Firewall Security Management Center
Forcepoint
6.1
2 CVEs0 on KEV0 new
VC
VPN Client
Forcepoint
7.8
2 CVEs0 on KEV0 new
WS
Web Security Content Gateway
Forcepoint
9.8
2 CVEs0 on KEV0 new
FS
F|One SmartEdge Agent
Forcepoint
7.8
1 CVEs0 on KEV0 new
FM
F1E mac
Forcepoint
4.8
1 CVEs0 on KEV0 new
FE
FIE Endpoint
Forcepoint
7.0
1 CVEs0 on KEV0 new
FO
Forcepoint One Endpoint (F1E)
Forcepoint
7.8
1 CVEs0 on KEV0 new
FS
Forcepoint Security Engine (NGFW)
Forcepoint
7.9
1 CVEs0 on KEV0 new
FU
Forcepoint User ID (FUID) server
Forcepoint .
9.8
1 CVEs0 on KEV0 new
NE
NGFW Engine
Forcepoint
7.8
1 CVEs0 on KEV0 new
OD
One Data Loss Prevention
Forcepoint
7.8
1 CVEs0 on KEV0 new
OE
One Endpoint With Policy Engine
Forcepoint
9.8
1 CVEs0 on KEV0 new
OS
One Smartedge Agent
Forcepoint
7.8
1 CVEs0 on KEV0 new
SM
Security Manager
Forcepoint
6.1
1 CVEs0 on KEV0 new
ST
Stonegate
Forcepoint
–
1 CVEs0 on KEV0 new
UI
User ID
Forcepoint
9.8
1 CVEs0 on KEV0 new
WS
Web Security (On-Prem)
Forcepoint
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-12974
FS
Forcepoint Security Engine (NGFW)
Forcepoint
7.9
0%
Sep 23Security Policy Bypass in Forcepoint Security Engine (NGFW)
CVE-2026-11970
FM
F1E mac
Forcepoint
4.8
0%
Aug 13This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758
CVE-2025-12694
VC
VPN Client
Forcepoint
7.8
0%
Jun 4Local Privilege Escalation in VPN Client
CVE-2025-2274
WS
Web Security (On-Prem)
Forcepoint
6.1
0%
Mar 16Stored Cross Site Scripting in Forcepoint Web Security
CVE-2025-12690
NE
NGFW Engine
Forcepoint
7.8
0%
Mar 11Local Privilege Escalation in NGFW Engine
CVE-2025-14026
FO
Forcepoint One Endpoint (F1E)
Forcepoint
7.8
0%
Jan 6Vulnerable Python version used in Forcepoint One DLP Client
CVE-2025-2272
FE
FIE Endpoint
Forcepoint
7.0
0%
May 22Privilege Escalation and Arbitrary code execution in F1E Endpoint
CVE-2024-9103
ES
Email Security
Forcepoint
6.1
0%
Mar 24Persistent XSS in blocked messages
CVE-2024-2166
ES
Email Security
Forcepoint
6.1
0%
Sep 4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected…
CVE-2023-6452
WS
Web Security
Forcepoint
9.6
0%
Aug 22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS
CVE-2023-5451
NG
Next Generation Firewall Security Management Center
Forcepoint
6.1
0%
Mar 4Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads
CVE-2023-1705
FS
F|One SmartEdge Agent
Forcepoint
7.8
0%
Jan 29Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escalation, Functionality Bypass.This issue…
CVE-2023-2080
ES
Email Security
Forcepoint
9.8
1%
Jun 15Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
CVE-2023-26292
CS
Cloud Security Gateway
Forcepoint
6.1
0%
Mar 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
CVE-2023-26291
CS
Cloud Security Gateway
Forcepoint
6.1
0%
Mar 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
CVE-2023-26290
CS
Cloud Security Gateway
Forcepoint
6.1
0%
Mar 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
CVE-2022-1700
CS
Cloud Security Gateway
Forcepoint
9.8
1%
Sep 12Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint…
CVE-2022-27609
OE
One Endpoint
Forcepoint
6.0
0%
Apr 4Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows does not provide sufficient anti-tampering protection of services by users with Administrator…
CVE-2022-27608
OE
One Endpoint
Forcepoint
6.0
0%
Apr 4Forcepoint One Endpoint prior to version 22.01 installed on Microsoft Windows is vulnerable to registry key tampering by users with Administrator privileges
CVE-2021-41530
NG
Next Generation Firewall
Forcepoint
7.5
1%
Oct 4Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been…
CVE-2020-6590
DL
Data Loss Prevention
Forcepoint
7.5
1%
Apr 8Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure
CVE-2019-6146
WS
Web Security
Forcepoint
6.1
3%
Jan 22It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection
CVE-2019-6147
NG
Next Generation Firewall Security Management Center
Forcepoint
5.9
1%
Dec 23Forcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration…
CVE-2019-6142
ES
Email Security
Forcepoint
6.1
1%
Nov 5It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3
CVE-2019-6144
OE
One Endpoint
Forcepoint
6.5
1%
Oct 23This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection
CVE-2019-6145
VC
Vpn Client
Forcepoint
6.7
1%
Sep 20Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability
CVE-2019-6143
NG
Next Generation Firewall
Forcepoint
9.1
1%
Aug 20Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially…
CVE-2019-6140
ES
Email Security
Forcepoint
9.8
1%
Apr 9A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration process is not…
CVE-2018-16530
ES
Email Security
Forcepoint
9.8
3%
Apr 9A stack-based buffer overflow in Forcepoint Email Security version 8.5 allows an attacker to craft malicious input and potentially crash a process creating a denial-of-service
CVE-2018-16529
ES
Email Security
Forcepoint
9.8
2%
Mar 28A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x
CVE-2019-6139
FU
Forcepoint User ID (FUID) server
Forcepoint .
9.8
2%
Feb 7Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001
CVE-2004-0112
ST
Stonegate
Forcepoint
–
10%
Nov 23The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,…