https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-2166.htmlhttps://patchthecve.com/cve/CVE-2024-2166.htmlWed, 17 Jun 2026 07:23:51 +0000HIGH 8.8: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email Security (Real Time Monitor modules) allows Reflected XSS.This issue affects Email Security: before 8.5.5 HF003.https://patchthecve.com/cve/CVE-2023-2080.htmlhttps://patchthecve.com/cve/CVE-2023-2080.htmlWed, 17 Jun 2026 05:51:21 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud allows Blind SQL Injection.https://patchthecve.com/cve/CVE-2023-0655.htmlhttps://patchthecve.com/cve/CVE-2023-0655.htmlWed, 17 Jun 2026 05:26:01 +0000MEDIUM 5.3: SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email addresses.https://patchthecve.com/cve/CVE-2022-1700.htmlhttps://patchthecve.com/cve/CVE-2022-1700.htmlWed, 17 Jun 2026 04:22:56 +0000HIGH 7.5: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to Junehttps://patchthecve.com/cve/CVE-2020-36519.htmlhttps://patchthecve.com/cve/CVE-2020-36519.htmlWed, 17 Jun 2026 03:15:38 +0000MEDIUM 4.9: Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. (The domain being spoofed must be a customer in the Mimecast grid from which the spoofing occurs.)https://patchthecve.com/cve/CVE-2021-45105.htmlhttps://patchthecve.com/cve/CVE-2021-45105.htmlTue, 25 Aug 2026 16:28:27 +0000MEDIUM 5.9: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue washttps://patchthecve.com/cve/CVE-2021-20023.htmlhttps://patchthecve.com/cve/CVE-2021-20023.htmlThu, 01 Oct 2026 21:17:16 +0000MEDIUM 4.9: SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.https://patchthecve.com/cve/CVE-2021-20022.htmlhttps://patchthecve.com/cve/CVE-2021-20022.htmlThu, 01 Oct 2026 21:17:15 +0000HIGH 7.2: SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host.https://patchthecve.com/cve/CVE-2021-20021.htmlhttps://patchthecve.com/cve/CVE-2021-20021.htmlWed, 12 Aug 2026 05:17:33 +0000CRITICAL 9.8: A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.https://patchthecve.com/cve/CVE-2020-6590.htmlhttps://patchthecve.com/cve/CVE-2020-6590.htmlWed, 17 Jun 2026 03:23:39 +0000HIGH 7.5: Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.