CVE-2022-1700: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also…

PriorityP354critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.70%

48.5th percentile

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This issue affects: Forcepoint Data Loss Prevention (DLP) versions prior to 8.8.2. Forcepoint One Endpoint (F1E) with Policy Engine versions prior to 8.8.2. Forcepoint Web Security Content Gateway versions prior to 8.5.5. Forcepoint Email Security with DLP enabled versions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
forcepoint	cloud_security_gateway	< 2022-06-20	2022-06-20
forcepoint	cloud_security_gateway	—	—
forcepoint	data_loss_prevention	< 8.8.2	8.8.2
forcepoint	data_loss_prevention	>= unspecified < 8.8.2	8.8.2
forcepoint	email_security	< 8.5.5	8.5.5
forcepoint	email_security_with_dlp_enabled	>= unspecified < 8.5.5	8.5.5
forcepoint	one_endpoint_with_policy_engine	< 8.8.2	8.8.2
forcepoint	one_endpoint_with_policy_engine	>= unspecified < 8.8.2	8.8.2
forcepoint	web_security_content_gateway	< 8.5.5	8.5.5
forcepoint	web_security_content_gateway	>= unspecified < 8.5.5	8.5.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.