{"id":"CVE-2023-6452","state":"PUBLISHED","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.\n\n\n\n\n\nThe\n Forcepoint Web Security portal allows administrators to generate \ndetailed reports on user requests made through the Web proxy. It has \nbeen determined that the \"user agent\" field in the Transaction Viewer is\n vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, \nwhich can be exploited by any user who can route traffic through the \nForcepoint Web proxy.\n\nThis \nvulnerability enables unauthorized attackers to execute JavaScript \nwithin the browser context of a Forcepoint administrator, thereby \nallowing them to perform actions on the administrator's behalf. Such a \nbreach could lead to unauthorized access or modifications, posing a \nsignificant security risk.\n\n\n\n\n\n\nThis issue affects Web Security: before 8.5.6.","publishedAt":"2024-08-22T15:21:32.329Z","updatedAt":"2024-08-22T19:50:08.561Z","severity":{"score":9.6,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","source":"forcepoint"},"assigner":"forcepoint","products":["Forcepoint Web Security"],"affected":[{"vendor":"Forcepoint","product":"Web Security","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.5.6","versionType":"semver"}],"modules":["Transaction Viewer"]}],"references":["https://support.forcepoint.com/s/article/000042212"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/6xxx/CVE-2023-6452.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-6452","state":"PUBLISHED","datePublished":"2024-08-22T15:21:32.329Z","dateUpdated":"2024-08-22T19:50:08.561Z","assignerShortName":"forcepoint","assignerOrgId":"e23ea22c-8c39-4eff-8980-2881e5ae54e2","dateReserved":"2023-11-30T22:10:02.333Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.\n\n\n\n\n\nThe\n Forcepoint Web Security portal allows administrators to generate \ndetailed reports on user requests made through the Web proxy. It has \nbeen determined that the \"user agent\" field in the Transaction Viewer is\n vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, \nwhich can be exploited by any user who can route traffic through the \nForcepoint Web proxy.\n\nThis \nvulnerability enables unauthorized attackers to execute JavaScript \nwithin the browser context of a Forcepoint administrator, thereby \nallowing them to perform actions on the administrator's behalf. Such a \nbreach could lead to unauthorized access or modifications, posing a \nsignificant security risk.\n\n\n\n\n\n\nThis issue affects Web Security: before 8.5.6."}],"affected":[{"vendor":"Forcepoint","product":"Web Security","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.5.6","versionType":"semver"}],"modules":["Transaction Viewer"]}],"references":[{"url":"https://support.forcepoint.com/s/article/000042212"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"forcepoint","orgId":"e23ea22c-8c39-4eff-8980-2881e5ae54e2","dateUpdated":"2024-08-22T15:21:32.329Z"},"configurations":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The\n User Agent field must be displayed in the Transaction Viewer, it is not by default. Users \nshould avoid adding the User Agent field to the Transaction Viewer until the workaround is implemented or Web Security is upgraded to version 8.5.6 or later."}],"value":"The\n User Agent field must be displayed in the Transaction Viewer, it is not by default. Users \nshould avoid adding the User Agent field to the Transaction Viewer until the workaround is implemented or Web Security is upgraded to version 8.5.6 or later."}],"credits":[{"lang":"en","type":"reporter","value":"Jasper Westerman"},{"lang":"en","type":"reporter","value":"Yanick de Pater"},{"lang":"en","type":"reporter","value":"Harm Blankers from REQON"}],"datePublic":"2024-08-21T19:00:00.000Z","impacts":[{"capecId":"CAPEC-592","descriptions":[{"lang":"en","value":"CAPEC-592 Stored XSS"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Customers should update to version 8.5.6 or follow the steps outlined in&nbsp;<a target=\"_blank\" rel=\"nofollow\" href=\"https://support.forcepoint.com/s/article/000042212\">https://support.forcepoint.com/s/article/000042212</a>&nbsp;for version 8.5.5.</p>"}],"value":"Customers should update to version 8.5.6 or follow the steps outlined in  https://support.forcepoint.com/s/article/000042212  for version 8.5.5."}],"source":{"discovery":"UNKNOWN"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>\nUsers \nshould avoid adding the User Agent field to the Transaction Viewer until the workaround is implemented or Web Security is upgraded to version 8.5.6 or later.\n\n\n\n</p>"}],"value":"Users \nshould avoid adding the User Agent field to the Transaction Viewer until the workaround is implemented or Web Security is upgraded to version 8.5.6 or later."}],"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"forcepoint","product":"web_security","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"8.5.6","versionType":"custom"}],"cpes":["cpe:2.3:a:forcepoint:web_security:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-22T19:48:57.338566Z","id":"CVE-2023-6452","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-22T19:50:08.561Z"}}]}}}