Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2022-1700: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint

45
This month
HIGH 7.5REMOTEUPGRADEUPGRADEUPGRADE

CVE-2022-1700 is a high-severity flaw (CVSS 7.5) affecting cloud security gateway, data loss prevention, email security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Defi

Why this priority

  • High severity
  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score7.5 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance0.8% (top 43%)
CISA exploited listNo
WeaknessCWE-611
Published2022-09-12
Last modified2026-06-17
Publisher (CNA): Forcepoint · Vendor: forcepoint

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

forcepoint cloud security gateway UPGRADE
Affected: < 2022-06-20
Fixed in: 2022-06-20
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy cloud-security-gateway || rpm -q cloud-security-gateway || cloud-security-gateway --version
2. UPGRADE to 2022-06-20 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade cloud-security-gateway
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade cloud-security-gateway
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
forcepoint data loss prevention UPGRADE
Affected: < 8.8.2
Fixed in: 8.8.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy data-loss-prevention || rpm -q data-loss-prevention || data-loss-prevention --version
2. UPGRADE to 8.8.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade data-loss-prevention
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade data-loss-prevention
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
forcepoint email security UPGRADE
Affected: < 8.5.5
Fixed in: 8.5.5
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy email-security || rpm -q email-security || email-security --version
2. UPGRADE to 8.5.5 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade email-security
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade email-security
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
forcepoint one endpoint with policy engine UPGRADE
Affected: < 8.8.2
Fixed in: 8.8.2
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy one-endpoint-with-policy-engine || rpm -q one-endpoint-with-policy-engine || one-endpoint-with-policy-engine --version
2. UPGRADE to 8.8.2 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade one-endpoint-with-policy-engine
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade one-endpoint-with-policy-engine
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
forcepoint web security content gateway UPGRADE
Affected: < 8.5.5
Fixed in: 8.5.5
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy web-security-content-gateway || rpm -q web-security-content-gateway || web-security-content-gateway --version
2. UPGRADE to 8.5.5 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade web-security-content-gateway
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade web-security-content-gateway
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-1700?

cloud security gateway: upgrade to 2022-06-20; data loss prevention: upgrade to 8.8.2; email security: upgrade to 8.5.5. Exact commands for each OS are on this page.

Is CVE-2022-1700 being exploited?

CVE-2022-1700 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-1700 affect?

CVE-2022-1700 affects cloud security gateway, data loss prevention, email security. Severity is high (CVSS 7.5). Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Securit

How urgent is CVE-2022-1700?

Priority 45/100. High severity; Remotely exploitable, no login, no user action

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.