CoreCVE
Back

MEDIUM

Persistent XSS in blocked messages

Published Mar 24, 2025

Description

Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security (Blocked Messages module) allows Stored XSS. This issue affects Email Security through 8.5.5.

Affected products

Remediation

Vendor solution

Customers should install ESG 8.5.5 HF005

Weaknesses (1)

CWE-83

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner forcepoint
Published Mar 24, 2025
Updated Mar 24, 2025
Reserved Sep 23, 2024
Link CVE-2024-9103
CISA Vulnrichment
Updated Mar 24, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2024-9103
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-9103
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a