Skip to content
OpenAdvisories

Vendor

Forcepoint

27 known vulnerabilities.

Products

Forcepoint Email Security 4 Cloud Security Gateway (CSG) 4 Web Security 4 One Endpoint 2 Email Security 2 Forcepoint Next Generation Firewall 1 Next Generation Firewall Security Management Center 1 Forcepoint One Endpoint (F1E) 1 Web Security (On-Prem) 1 VPN Client 1 NGFW Engine 1 F|One SmartEdge Agent 1 Forcepoint User ID (FUID) server 1 FIE Endpoint 1 F1E mac 1 NGFW Security Management Center 1 Forcepoint VPN Client for Windows 1 Forcepoint Security Engine (NGFW) 1 Data Loss Prevention (DLP) 1 One Endpoint (F1E) with Policy Engine 1 Web Security Content Gateway 1 Email Security with DLP enabled 1 Cloud Security Gateway 1 Next Generation Firewall 0
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.9
    CVE-2026-12974

    Security Policy Bypass in Forcepoint Security Engine (NGFW)

    A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW). This issue affects Forcepoint Security Engine (NGFW): from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0.

    Forcepoint Forcepoint Security Engine (NGFW)
  • High 8.5
    CVE-2025-12694

    Local Privilege Escalation in VPN Client

    A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior.

    Forcepoint VPN Client
  • High 7.3
    CVE-2025-12690

    Local Privilege Escalation in NGFW Engine

    Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affects NGFW Engine through 6.10.19, through 7.3.0, through 7.2.4, through 7.1.10.

    Forcepoint NGFW Engine
  • High 7.8
    CVE-2025-14026

    Vulnerable Python version used in Forcepoint One DLP Client

    Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared librarie…

    Forcepoint Forcepoint One Endpoint (F1E)
  • High 7.0
    CVE-2025-2272

    Privilege Escalation and Arbitrary code execution in F1E Endpoint

    Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, Hijacking a privileged process.This issue affects FIE Endpoint: before 25.05.

    Forcepoint FIE Endpoint
  • High 8.8
    CVE-2024-2166

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email …

    Forcepoint Email Security
  • High 8.4
    CVE-2023-1705

    Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) al…

    Forcepoint F|One SmartEdge Agent
  • High 8.5
    CVE-2023-2080

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud …

    Forcepoint Cloud Security Gateway (CSG)
  • High 7.5
    CVE-2022-1700

    Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Los…

    Forcepoint One Endpoint (F1E) with Policy Engine Email Security with DLP enabled Data Loss Prevention (DLP)