High · 8.8 CVE-2024-2166 EUVD-2024-27130GHSA-232q-v7rp-6ff8

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time …

Published Sep 4, 2024 · Updated Sep 5, 2024 · Assigned by forcepoint

Vendor: Forcepoint Product: Email Security

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003.

Affected products

Vendor	Product	Affected	Fixed
Forcepoint	Email Security	< 8.5.5 HF003	8.5.5 HF003

References

https://support.forcepoint.com/s/article/000042397