CVE Browser

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Stack overflow in login process to the Security Management and Log Servers

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

Improper Certificate Validation in Quantum Security Gateway

Authentication Bypass in Check Point Security Management Server

Local Privilege Escalation in Gaia Portal

Management Authentication Bypass and Privilege Escalation

Authentication Bypass in the SmartConsole Login Process Using an Application Token

Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS

User Authentication Bypass in VPN Remote Access and Mobile Access

Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

Authenticated Administrator Role-Based Access Control Bypass in Compliance

HTTP service can incorrectly process malformed HTTP requests

SQL injection issue in UserCheck Portal when DLP Software Blade is active

Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP

VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero

Local privilege escalation in Harmony SASE Windows Agent

Information Disclosure in Identity Agent Debug Files

Information Disclosure in Identity Agent Registry Keys

Exposed SFTP server

Path Traversal

Lack of TLS validation

SmartConsole Sensitive Credential Exposure via Memory Dump

DLL-HiJacking