VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 4, 2024· Updated Jun 17, 2026

CVE-2024-2166

CVE-2024-2166

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003.

Affected products

4
  • Forcepoint/Email Security3 versions
    cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*range: <8.5.5
    • cpe:2.3:a:forcepoint:email_security:8.5.5:-:*:*:*:*:*:*
    • (no CPE)range: 0
  • Forcepoint/Email Security Cloudllm-fuzzy
    Range: <8.5.5 HF003

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.