Skip to content
OpenAdvisories

Vendor

checkpoint

33 known vulnerabilities.

Products

Quantum Security Gateway 10 Quantum Security Management 7 Check Point Mobile Access 3 Identity Agent 2 Multi-Domain Security Management 2 Spark Firewalls 2 Check Point SmartConsole 2 Check Point Management Log Server 1 Harmony Endpoint. 1 Multi-Domain Security Management, Quantum Security Management 1 Check Point Harmony SASE 1 ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management 1 Hramony SASE 1 Check Point Quantum Gateway, Spark Gateway and CloudGuard Network 1 Harmony Endpoint Security Client for Windows 1 ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer 1 Security Management Server 1 Multi-Domain Security Management Server 1 Identity Awareness 1 check_point_quantum_gateway_and_spark_gateway_and_cloudguard_network 0 cloudguard_network_security_firmware 0 quantum_maestro_firmware 0 quantum_scalable_chassis_firmware 0 quantum_security_gateway_firmware 0 quantum_spark_gateway_firmware 0
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 4.1
    CVE-2026-48136

    Authenticated Administrator Role-Based Access Control Bypass in Compliance

    When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where th…

    checkpoint Quantum Security Management Network devices
  • Medium 5.3
    CVE-2026-48135

    HTTP service can incorrectly process malformed HTTP requests

    A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation.

    checkpoint Quantum Security Gateway Network devices
  • Medium 5.6
    CVE-2026-48134

    SQL injection issue in UserCheck Portal when DLP Software Blade is active

    When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck inci…

    checkpoint Quantum Security Gateway Network devices
  • Medium 6.5
    CVE-2025-8305

    Information Disclosure in Identity Agent Debug Files

    An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files.

    checkpoint Identity Awareness Network devices
  • Medium 6.5
    CVE-2025-8304

    Information Disclosure in Identity Agent Registry Keys

    An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server.

    checkpoint Identity Agent Network devices
  • Medium 5.0
    CVE-2024-52885

    Path Traversal

    The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the…

    checkpoint Check Point Mobile Access Network devices
  • Medium 6.5
    CVE-2025-2028

    Lack of TLS validation

    Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs

    checkpoint Check Point Management Log Server Network devices
  • Medium 6.1
    CVE-2024-24915

    SmartConsole Sensitive Credential Exposure via Memory Dump

    Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.

    checkpoint Check Point SmartConsole Network devices
  • Medium 6.5
    CVE-2024-24916

    DLL-HiJacking

    Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

    checkpoint Check Point SmartConsole Network devices
  • Medium 5.4
    CVE-2024-52888

    Stored-XSS

    For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.

    checkpoint Check Point Mobile Access Network devices
  • Medium 5.3
    CVE-2024-24911

    Out of Bounds read in the CPCA process on Check Point Management Server

    In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Securi…

    checkpoint Multi-Domain Security Management, Quantum Security Management Network devices
  • Medium 6.7
    CVE-2024-24912

    Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file

    A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target s…

    checkpoint Harmony Endpoint Security Client for Windows Windows Network devices