Forcepoint NGFW Security Management Center Downloads Vulnerable to Reflected XSS
CVE-2023-5451

6.1MEDIUM

Key Information:

Vendor: Forcepoint
Status: Next Generation Firewall Security Management Center
Vendor: CVE Published:; 4 March 2024

What is CVE-2023-5451?

Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Management Client downloads and ECA configuration downloads.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Next Generation Firewall Security Management Center (SMC Downloads feature) allows Reflected XSS.

This issue affects Next Generation Firewall Security Management Center : before 6.10.13, from 6.11.0 before 7.1.2.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Next Generation Firewall Security Management Center 0 < 6.10.13

Next Generation Firewall Security Management Center 6.11.0 < 7.1.2

References

https://support.forcepoint.com/s/article/000042395

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Mar 4, 2024
Vulnerability Reserved
Oct 6, 2023

Credit

Hazem Osama

JSON

Forcepoint