CVE-2024-9103

Summary

Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security (Blocked Messages module) allows Stored XSS. This issue affects Email Security through 8.5.5.

Affected Software

VendorProductVersion RangeStatus
ForcepointEmail Security0 <= 8.5.5affected

Weaknesses

  • CWE-83: CWE-83: Improper Neutralization of Script in Attributes in a Web Page

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References