1. Home
  2. CVE Database
  3. CVE-2020-6590
HIGH · 7.5

CVE-2020-6590

Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.

Vulnerability Description

Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ForcepointData Loss Prevention< 8.7.1
ForcepointEmail Security< 8.5.4
ForcepointWeb Security Content Gateway< 8.5.4

Related Weaknesses (CWE)

CWE-611

References

FAQ

What is CVE-2020-6590?

CVE-2020-6590 is a vulnerability with a CVSS score of 7.5 (HIGH). Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.

How severe is CVE-2020-6590?

CVE-2020-6590 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-6590?

Check the references section above for vendor advisories and patch information. Affected products include: Forcepoint Data Loss Prevention, Forcepoint Email Security, Forcepoint Web Security Content Gateway.