VULNERABILITY INTELLIGENCE
CVE-2023-2080
CVSS score8.5 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2023-06-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection.
Weakness classification
- psirt@forcepoint.com: CWE-89
- nvd@nist.gov: CWE-89
Primary references
- psirt@forcepoint.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory