Endpoint Security
Vendor:
First CVE: Jun 19, 2012 · Active for 14 years
14
Total CVEs
More Total CVEs than 91% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 27% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Endpoint Security over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 19, 2012
14 years ago
Most Recent CVE
Nov 12, 2023
985 days ago
CVE Severity & Scoring
Endpoint Security14 CVEs
21%
21%
57%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local11 (78.6%)
Network0 (0.0%)
Unknown3 (21.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (71.4%)
High1 (7.1%)
Unknown3 (21.4%)
User Interaction
None8 (57.1%)
Unknown3 (21.4%)
Required3 (21.4%)
Privileges Required
Low7 (50.0%)
High2 (14.3%)
None2 (14.3%)
Unknown3 (21.4%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-8452HIGH A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will g | Apr 22, 2019 | 7.8 | 35 | NO | YES |
CVE-2021-30360HIGH Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation re | Jan 10, 2022 | 7.8 | 25 | NO | NO |
CVE-2023-28133HIGH Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file | Jul 23, 2023 | 7.8 | 24 | NO | NO |
CVE-2019-8454HIGH A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonatin | Apr 29, 2019 | 7.0 | 23 | NO | NO |
CVE-2023-28134HIGH Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute lo | Nov 12, 2023 | 7.8 | 22 | NO | NO |
CVE-2022-23742HIGH Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those f | May 12, 2022 | 7.8 | 21 | NO | NO |
CVE-2020-6021HIGH Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer a | Dec 3, 2020 | 7.8 | 20 | NO | NO |
CVE-2019-8461HIGH Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. A | Aug 29, 2019 | 7.8 | 20 | NO | NO |
CVE-2012-2753MEDIUM Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security | Jun 19, 2012 | 6.9 | 19 | NO | NO |
CVE-2020-6014MEDIUM Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the | Nov 2, 2020 | 6.5 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.1% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Endpoint Security
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| r73 | 1 | 6.9 | 0.4% | 0 | 0 |
| e87.30 | 1 | 7.8 | 5.6% | 0 | 0 |
| e86.40 | 1 | 2.3 | 4.3% | 0 | 0 |
| e86.30 | 1 | 2.3 | 4.3% | 0 | 0 |
| e86.20 | 1 | 2.3 | 4.3% | 0 | 0 |
| e86.10 | 1 | 2.3 | 4.3% | 0 | 0 |
| e86 | 1 | 7.8 | 0.2% | 0 | 0 |
| e85 | 2 | 5.0 | 2.3% | 0 | 0 |
| e84.10 | 1 | 5.5 | 0.3% | 0 | 0 |
| e84 | 2 | 5.0 | 2.3% | 0 | 0 |
| e83 | 1 | 2.3 | 4.3% | 0 | 0 |
| e80.50 | 2 | 3.3 | 0.2% | 0 | 0 |
| e80.41 | 2 | 3.3 | 0.2% | 0 | 0 |
| e80.40 | 2 | 3.3 | 0.2% | 0 | 0 |
| e80.30 | 3 | 4.5 | 0.3% | 0 | 0 |
| e80.20 | 3 | 4.5 | 0.3% | 0 | 0 |
| e80.10 | 3 | 4.5 | 0.3% | 0 | 0 |
| e80 | 3 | 4.5 | 0.3% | 0 | 0 |