PT-2026-25753 · Forcepoint · Web Security

Published 2026-03-16 · Updated 2026-03-16 · CVE-2025-2274

Mitre

CVSS v4.0

4.8

4.8

Medium

Base vector

AV:A/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-2274

Affected Products

Web Security

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-2274 · Security Note
• https://support.forcepoint.com/s/article/Security-Advisory-Stored-Cross-Site-Scripting-in-Forcepoint-Web-Security · Note