CVE-2022-1700

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-1700
Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This issue affects: Forcepoint Data Loss Prevention (DLP) versions prior to 8.8.2. Forcepoint One Endpoint (F1E) with Policy Engine versions prior to 8.8.2. Forcepoint Web Security Content Gateway versions prior to 8.5.5. Forcepoint Email Security with DLP enabled versions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://help.forcepoint.com/security/CVE/CVE-2022-1700.html Mitigation Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:forcepoint:cloud_security_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:data_loss_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:one_endpoint_with_policy_engine:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:web_security_content_gateway:*:*:*:*:*:*:*:*
History

15 Sep 2022, 18:05

Type Values Removed Values Added
First Time Forcepoint email Security
Forcepoint cloud Security Gateway
Forcepoint one Endpoint With Policy Engine
Forcepoint
Forcepoint web Security Content Gateway
Forcepoint data Loss Prevention
CWE CWE-611
References (MISC) https://help.forcepoint.com/security/CVE/CVE-2022-1700.html - (MISC) https://help.forcepoint.com/security/CVE/CVE-2022-1700.html - Mitigation, Vendor Advisory
CPE cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:data_loss_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:one_endpoint_with_policy_engine:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:cloud_security_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:forcepoint:web_security_content_gateway:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

12 Sep 2022, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-09-12 19:15

Updated : 2023-12-10 14:35

NVD link : CVE-2022-1700

Mitre link : CVE-2022-1700

CVE.ORG link : CVE-2022-1700

JSON object : View

Products Affected

forcepoint

  • web_security_content_gateway
  • cloud_security_gateway
  • email_security
  • one_endpoint_with_policy_engine
  • data_loss_prevention
CWE
CWE-611

Improper Restriction of XML External Entity Reference