CVE-2023-2080

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-15 · updated 2026-06-17
Weakness: CWE-89

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection.

Affected products

Forcepoint Email Security: all versions
Forcepoint Web Security: all versions

References

https://support.forcepoint.com/s/article/000041871
https://support.forcepoint.com/s/article/000041871

Get alerted when CVE-2023-2080 or the next vulnerability affects your stack