CVE-2023-26291

published 2023-03-29

CVE-2023-26291: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web…

Priority P4 24 medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_form.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
forcepoint	cloud_security_gateway	< 03/29/2023	03/29/2023
forcepoint	cloud_security_gateway	< 2023-03-29	2023-03-29
forcepoint	web_security	< 03/29/2023	03/29/2023
forcepoint	web_security	< 2023-03-29	2023-03-29

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79