2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","packageName":"Portal","platforms":["Web Cloud Security Gateway","Email Security Cloud"],"product":"Cloud Security Gateway (CSG) ","vendor":"Forcepoint","versions":[{"status":"unaffected","version":"TBD"}]}],"source":"psirt@forcepoint.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:forcepoint:email_security:-:*:*:*:*:*:*:*","matchCriteriaId":"C9DD17A1-E6F8-4ED5-9566-C5C3A62EFCDE","vulnerable":true},{"criteria":"cpe:2.3:a:forcepoint:web_security:-:*:*:*:*:*:*:*","matchCriteriaId":"66F97068-979A-4D45-B2C6-A98FF1887EED","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection."}],"id":"CVE-2023-2080","lastModified":"2026-06-17T05:51:21.440","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":6.0,"source":"psirt@forcepoint.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2080","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-12-11T20:33:24.376436Z","version":"2.0.3"}}]},"published":"2023-06-15T23:15:09.020","references":[{"source":"psirt@forcepoint.com","tags":["Vendor Advisory"],"url":"https://support.forcepoint.com/s/article/000041871"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.forcepoint.com/s/article/000041871"}],"sourceIdentifier":"psirt@forcepoint.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"psirt@forcepoint.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-89"}],"source":"nvd@nist.gov","type":"Primary"}]}
|