| Package | Affected versions | Patched versions |
|---|---|---|
| web security | ≥ 8.0.0, < 8.5.4 | 8.5.4 |
It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium) (/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free