CVE-2018-16529

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-28 · updated 2026-06-17
Weakness: CWE-640

Description

A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.

Affected products

Forcepoint Email Security: from 8.5.0 through 8.5.3

References

https://help.forcepoint.com/security/CVE/CVE-2018-16529.html
https://seclists.org/fulldisclosure/2018/Nov/23
https://help.forcepoint.com/security/CVE/CVE-2018-16529.html
https://seclists.org/fulldisclosure/2018/Nov/23

Get alerted when CVE-2018-16529 or the next vulnerability affects your stack