Login Request a demo
WS
Product
Web Security
by Forcepoint · last CVE Mar 16, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 2High 0Medium 5Low 0
Severity
All severities7Critical2High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Web Security to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-2080
9.8
1%
Jun 15
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
Affected: All versions, or not specified
CVE-2023-6452
9.6
0%
Aug 22
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS
Affected: before 8.5.6
CVE-2025-2274
6.1
0%
Mar 16
Stored Cross Site Scripting in Forcepoint Web Security
Affected: through 8.5.6
CVE-2023-26292
6.1
0%
Mar 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
Affected: before 2023-03-29
CVE-2023-26291
6.1
0%
Mar 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
Affected: before 2023-03-29
CVE-2023-26290
6.1
0%
Mar 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway,…
Affected: before 2023-03-29
CVE-2019-6146
6.1
3%
Jan 22
It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection
Affected: 8.0.0 before 8.5.4
Showing 7