https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:06:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-159640 EUVD-2026-159640 https://cve.radiocsirt.org/vuln/euvd-2026-159640 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6452 <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.</p> <p>The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It has been determined that the &#34;user agent&#34; field in the Transaction Viewer is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, which can be exploited by any user who can route traffic through the Forcepoint Web proxy.</p> <p>This vulnerability enables unauthorized attackers to execute JavaScript within the browser context of a Forcepoint administrator, thereby allowing them to perform actions on the administrator&#39;s behalf. Such a breach could lead to unauthorized access or modifications, posing a significant security risk.</p> <p>This issue affects Web Security: before 8.5.6.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.</p> <p>The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It has been determined that the &#34;user agent&#34; field in the Transaction Viewer is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, which can be exploited by any user who can route traffic through the Forcepoint Web proxy.</p> <p>This vulnerability enables unauthorized attackers to execute JavaScript within the browser context of a Forcepoint administrator, thereby allowing them to perform actions on the administrator&#39;s behalf. Such a breach could lead to unauthorized access or modifications, posing a significant security risk.</p> <p>This issue affects Web Security: before 8.5.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6452 https://cve.radiocsirt.org/vuln/ghsa-85fc-rr25-p568 <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.</p> <p>The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It has been determined that the &#34;user agent&#34; field in the Transaction Viewer is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, which can be exploited by any user who can route traffic through the Forcepoint Web proxy.</p> <p>This vulnerability enables unauthorized attackers to execute JavaScript within the browser context of a Forcepoint administrator, thereby allowing them to perform actions on the administrator&#39;s behalf. Such a breach could lead to unauthorized access or modifications, posing a significant security risk.</p> <p>This issue affects Web Security: before 8.5.6.</p> <p>Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.</p> <p>The Forcepoint Web Security portal allows administrators to generate detailed reports on user requests made through the Web proxy. It has been determined that the &#34;user agent&#34; field in the Transaction Viewer is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, which can be exploited by any user who can route traffic through the Forcepoint Web proxy.</p> <p>This vulnerability enables unauthorized attackers to execute JavaScript within the browser context of a Forcepoint administrator, thereby allowing them to perform actions on the administrator&#39;s behalf. Such a breach could lead to unauthorized access or modifications, posing a significant security risk.</p> <p>This issue affects Web Security: before 8.5.6.</p> https://cve.radiocsirt.org/vuln/ghsa-85fc-rr25-p568 https://cve.radiocsirt.org/vuln/gsd-2023-6452 gsd-2023-6452 https://cve.radiocsirt.org/vuln/gsd-2023-6452