« Volver al listado

CVE-2020-6590

Estado: ModificadaAlta (7.5)—

Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Forcepoint — Data Loss PreventionForcepoint — Email SecurityForcepoint — WEB Security Content Gateway

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-6590",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@forcepoint.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Forcepoint Web Security Content Gateway",
          "versions": [
            {
              "status": "affected",
              "version": "versions prior to 8.5.4"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-04-08T22:15:13.230",
  "references": [
    {
      "url": "https://help.forcepoint.com/security/CVE/CVE-2020-6590.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@forcepoint.com"
    },
    {
      "url": "https://help.forcepoint.com/security/CVE/CVE-2020-6590.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@forcepoint.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Forcepoint Web Security Content Gateway versions prior to 8.5.4 improperly process XML input, leading to information disclosure."
    },
    {
      "lang": "es",
      "value": "Forcepoint Web Security Content Gateway versiones anteriores a 8.5.4, procesan inapropiadamente una entrada XML, conllevando a una divulgación de información"
    }
  ],
  "lastModified": "2026-06-17T03:23:39.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:forcepoint:data_loss_prevention:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37C7FDC7-F210-4016-AF86-25264A4821F0",
              "versionEndExcluding": "8.7.1"
            },
            {
              "criteria": "cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E773C152-EE26-46C1-AE81-E4775B68D31B",
              "versionEndExcluding": "8.5.4"
            },
            {
              "criteria": "cpe:2.3:a:forcepoint:web_security_content_gateway:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56A632C0-A8D7-4AD8-B5FB-CAB86385DBA9",
              "versionEndExcluding": "8.5.4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@forcepoint.com"
}