How many CVEs does Forcepoint have?

Forcepoint has 31 published CVE records since 2004, including 7 in the last two years.

How many Forcepoint CVEs are in CISA KEV?

None of Forcepoint's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Forcepoint products have the most CVEs?

The Forcepoint products with the most published CVEs are Email Security, Web Security, Cloud Security Gateway, Forcepoint Email Security, Cloud Security Gateway (CSG).

What are the most common weakness types in Forcepoint CVEs?

Forcepoint's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-284 (Improper Access Control), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-863 (Incorrect Authorization).

Are there public exploits for Forcepoint vulnerabilities?

Yes — 1 of Forcepoint's CVEs have a known public exploit.

How many critical Forcepoint vulnerabilities are there?

Forcepoint has 8 critical and 8 high-severity CVEs.

What is the average severity of Forcepoint CVEs?

The average CVSS base score across Forcepoint's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

31 CVEs

Forcepoint Vulnerabilities

Name: Forcepoint vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Forcepoint.

31

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.4

Avg CVSS

2004–2026

Overview

Forcepoint has 31 published CVE records since 2004, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Forcepoint products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Forcepoint's vulnerability posture, as a share of its 31 published CVEs.

Average CVSS: 7.4
Critical / high: 52%
Actively exploited (KEV): 0%
Public exploit available: 3%
Patch available: 77%

Severity and exploitation

How the CVSS severity of Forcepoint's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High8

Medium15

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Forcepoint's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of Forcepoint's CVEs has a known public exploit available.

Most affected products

The Forcepoint products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Forcepoint CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Forcepoint CVE records.

Disclosure activity by year

How many Forcepoint CVEs were published each year.

2019

9

2020

1

2021

2

2022

3

2023

4

2024

4

2025

2

2026

5

Latest Forcepoint CVEs

The most recently disclosed vulnerabilities affecting Forcepoint.

Medium vulnerability · 2026-08-13
CWE-754
Medium · CVSS 4.8
EPSS 0.1%2026-08-13
Local Privilege Escalation in VPN Client
CWE-250
High · CVSS 8.5
EPSS 0.1%2026-06-04
Stored Cross Site Scripting in Forcepoint Web Security
CWE-79
Medium · CVSS 4.8
EPSS 0.2%2026-03-16
Local Privilege Escalation in NGFW Engine
CWE-250
High · CVSS 7.3
EPSS 0.1%2026-03-11
Vulnerable Python version used in Forcepoint One DLP Client
High · CVSS 7.8
EPSS 0.2%2026-01-06
Privilege Escalation and Arbitrary code execution in F1E Endpoint
CWE-427
High · CVSS 7.3
EPSS 0.2%2025-05-22
Medium vulnerability · 2025-03-24
CWE-83
Medium · CVSS 6.1
EPSS 0.2%2025-03-24
High vulnerability · 2024-09-04
CWE-79
High · CVSS 8.8
EPSS 0.3%2024-09-04
Critical vulnerability · 2024-08-22
CWE-79
Critical · CVSS 9.6
EPSS 0.4%2024-08-22
Medium vulnerability · 2024-03-04
CWE-79
Medium · CVSS 6.1
EPSS 0.3%2024-03-04
High vulnerability · 2024-01-29
CWE-862
High · CVSS 8.4
EPSS 0.1%2024-01-29
Critical vulnerability · 2023-06-15
CWE-89
Critical · CVSS 9.8
EPSS 0.5%2023-06-15

Track new Forcepoint CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Forcepoint CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,673 CVEs linux22,774 CVEs Google16,481 CVEs Apple15,095 CVEs Oracle12,708 CVEs Debian10,226 CVEs IBM8,839 CVEs Red Hat8,111 CVEs

Browse all vendors

Frequently asked questions

Common questions about Forcepoint vulnerabilities.

How many CVEs does Forcepoint have?: Forcepoint has 31 published CVE records since 2004, including 7 in the last two years.
How many Forcepoint CVEs are in CISA KEV?: None of Forcepoint's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Forcepoint products have the most CVEs?: The Forcepoint products with the most published CVEs are Email Security, Web Security, Cloud Security Gateway, Forcepoint Email Security, Cloud Security Gateway (CSG).
What are the most common weakness types in Forcepoint CVEs?: Forcepoint's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-284 (Improper Access Control), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-863 (Incorrect Authorization).
Are there public exploits for Forcepoint vulnerabilities?: Yes — 1 of Forcepoint's CVEs have a known public exploit.
How many critical Forcepoint vulnerabilities are there?: Forcepoint has 8 critical and 8 high-severity CVEs.
What is the average severity of Forcepoint CVEs?: The average CVSS base score across Forcepoint's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Forcepoint vulnerabilities

Monitor new Forcepoint vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing