Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Forcepoint — Vulnerabilities & Security Advisories 26

Browse all 26 CVE security advisories affecting Forcepoint. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Forcepoint operates primarily in the data loss prevention and secure web gateway sectors, providing enterprises with tools to monitor and control employee internet usage and protect sensitive information. The vendor’s software portfolio has historically been associated with several critical vulnerability classes, including remote code execution, cross-site scripting, and privilege escalation flaws. With twenty-three Common Vulnerabilities and Exposures currently on record, these issues often stem from improper input validation or insecure default configurations within its endpoint and network security agents. While no single catastrophic breach has defined the company’s public narrative, the recurring nature of these CVEs highlights ongoing challenges in securing complex enterprise security stacks. These technical weaknesses pose significant risks, potentially allowing attackers to bypass security controls or gain unauthorized administrative access to protected systems, necessitating rigorous patch management and continuous security auditing for organizations relying on Forcepoint solutions.

CVE ID Title CVSS Severity Published
CVE-2026-12974 Security Policy Bypass in Forcepoint Security Engine (NGFW) — Forcepoint Security Engine (NGFW) CWE-1284 7.9 High 2026-09-23
CVE-2026-11970 Forcepoint One Endpoint 异常处理不当漏洞 — F1E mac CWE-754 4.8 Medium 2026-08-13
CVE-2025-12694 Local Privilege Escalation in VPN Client — VPN Client CWE-250 - - 2026-06-04
CVE-2025-2274 Stored Cross Site Scripting in Forcepoint Web Security — Web Security (On-Prem) CWE-79 5.4AI Medium AI 2026-03-16
CVE-2025-12690 Local Privilege Escalation in NGFW Engine — NGFW Engine CWE-250 7.8AI High AI 2026-03-11
CVE-2025-14026 Vulnerable Python version used in Forcepoint One DLP Client — Forcepoint One Endpoint (F1E) 8.4 - 2026-01-06
CVE-2025-2272 Privilege Escalation and Arbitrary code execution in F1E Endpoint — FIE Endpoint CWE-427 7.0 High 2025-05-22
CVE-2024-9103 Persistent XSS in blocked messages — Email Security CWE-83 6.1 Medium 2025-03-24
CVE-2024-2166 Forcepoint Email Security 安全漏洞 — Email Security CWE-79 8.8 High 2024-09-04
CVE-2023-6452 Forcepoint Web Security 安全漏洞 — Web Security CWE-79 9.6 Critical 2024-08-22
CVE-2023-5451 Forcepoint Next Generation Firewall 安全漏洞 — Next Generation Firewall Security Management Center CWE-79 6.1 Medium 2024-03-04
CVE-2023-1705 Forcepoint One SmartEdge Agent 安全漏洞 — F|One SmartEdge Agent CWE-862 8.4 High 2024-01-29
CVE-2023-2080 Forcepoint Cloud Security Gateway SQL注入漏洞 — Cloud Security Gateway (CSG) CWE-89 8.5 High 2023-06-15
CVE-2023-26292 Forcepoint Cloud Security Gateway 跨站脚本漏洞 — Cloud Security Gateway (CSG) CWE-79 6.1 Medium 2023-03-29
CVE-2023-26291 Forcepoint Cloud Security Gateway 跨站脚本漏洞 — Cloud Security Gateway (CSG) CWE-79 6.1 Medium 2023-03-29
CVE-2023-26290 Forcepoint Cloud Security Gateway 跨站脚本漏洞 — Cloud Security Gateway (CSG) CWE-79 6.1 Medium 2023-03-29
CVE-2022-1700 Forcepoint Data Loss Prevention 代码问题漏洞 — Data Loss Prevention (DLP) CWE-611 7.5 High 2022-09-12
CVE-2022-27609 Forcepoint One Endpoint安全漏洞 — One Endpoint CWE-863 6.0 Medium 2022-04-04
CVE-2022-27608 Forcepoint One Endpoint安全漏洞 — One Endpoint CWE-863 6.0 Medium 2022-04-04
CVE-2019-6147 Forcepoint NGFW Security Management Center 代码问题漏洞 — NGFW Security Management Center 6.5 - 2019-12-23
CVE-2019-6142 Forcepoint Email Security 跨站脚本漏洞 — Forcepoint Email Security CWE-79 6.1 - 2019-11-05
CVE-2019-6145 Forcepoint VPN Client for Windows 代码问题漏洞 — Forcepoint VPN Client for Windows 6.7 - 2019-09-20
CVE-2019-6143 Forcepoint Next Generation Firewall 授权问题漏洞 — Forcepoint Next Generation Firewall 9.1 - 2019-08-20
CVE-2019-6140 Forcepoint Email Security 权限许可和访问控制问题漏洞 — Forcepoint Email Security CWE-284 9.8 - 2019-04-09
CVE-2018-16530 Forcepoint Email Security 缓冲区错误漏洞 — Forcepoint Email Security 9.8 - 2019-04-09
CVE-2018-16529 Forcepoint Email Security 授权问题漏洞 — Forcepoint Email Security CWE-640 9.8 - 2019-03-28

This page lists every published CVE security advisory associated with Forcepoint. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.