CVE-2025-2272CWE-427

Privilege Escalation and Arbitrary code execution in F1E Endpoint

High · published May 22, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, Hijacking a privileged process.This issue affects FIE Endpoint: before 25.05.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00168 · 5.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-05-22T12:23Z
EPSS history
Timeline
  • 22 MAY 12:23Z
    Privilege Escalation and Arbitrary code execution in F1E Endpoint
    cvelistv5