CVE Vulnerability

CVE-2022-1700

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This issue affects: Forcepoint Data Loss Prevention (DLP) versions prior to 8.8.2. Forcepoint One Endpoint (F1E) with Policy Engine versions prior to 8.8.2. Forcepoint Web Security Content Gateway versions prior to 8.5.5. Forcepoint Email Security with DLP enabled versions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://help.forcepoint.com/security/CVE/CVE-2022-1700.html Mitigation Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:forcepoint:cloud_security_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:one_endpoint_with_policy_engine:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:data_loss_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:web_security_content_gateway:*:*:*:*:*:*:*:*
Information

Published : 2022-09-12 07:15

Updated : 2022-09-15 06:05

NVD link : CVE-2022-1700

Mitre link : CVE-2022-1700

Products Affected
No products.
CWE
CWE-611

Improper Restriction of XML External Entity Reference