PT-2025-22462 · Forcepoint · Forcepoint Fie Endpoint

Publicado 2025-05-22 · Atualizado 2025-05-27 · CVE-2025-2272

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint FIE Endpoint versions prior to 25.05

Description The issue is related to an Uncontrolled Search Path Element vulnerability, which allows for Privilege Escalation, Code Injection, and Hijacking a privileged process.

Recommendations For versions prior to 25.05, update to version 25.05 or later to resolve the issue.

Correção

LPE

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2025-2272

Produtos afetados

Forcepoint Fie Endpoint

Referências · 4

• https://support.forcepoint.com/s/article/Security-Advisory-Privilege-Escalation-and-Arbitrary-code-execution-in-F1E-Endpoint · Nota
• https://twitter.com/CVEnew/status/1925529699138068589 · Publicação no Twitter
• https://twitter.com/cracbot/status/1927318919653515762 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-2272 · Nota de Segurança