CVE-2023-5451CWE-79

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA …

Medium · published March 4, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
22.4
In the wild
Unconfirmed
What it is

Forcepoint

NGFW Security Management Center Management Server has SMC Downloads

optional feature to offer standalone Management Client downloads and ECA

configuration downloads.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Next Generation Firewall Security Management Center (SMC Downloads feature) allows Reflected XSS.

This issue affects Next Generation Firewall Security Management Center : before 6.10.13, from 6.11.0 before 7.1.2.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00308 · 22.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-03-04T15:54Z
EPSS history
Timeline
  • 04 MAR 15:54Z
    Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA …
    cvelistv5