Browse CVEs

CRITICAL 9.8 CVE-2026-16232 KEVEPSS 73% An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an applicati… Multi Domain Security Management No fix yet Fix from $2,3002026-07-22 CRITICAL 9.8 CVE-2025-3831 Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. Harmony Sase Mitigation only Fix from $2,3002025-08-12 MEDIUM 5.4 CVE-2024-52885 The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (autho… Mobile Access Mitigation only Fix from $1,6002025-08-06 MEDIUM 5.3 CVE-2025-2028 Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs Log Server Mitigation only Fix from $1,6002025-08-06 HIGH 7.2 CVE-2024-24915 Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and … Smartconsole Mitigation only Fix from $1,9502025-06-29 HIGH 7.8 CVE-2024-24916 Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileg… Smartconsole Mitigation only Fix from $1,9502025-06-19 MEDIUM 5.4 CVE-2024-52887 Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list. Mobile Access Mitigation only Fix from $1,6002025-04-27 MEDIUM 5.4 CVE-2024-52888 For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. Mobile Access Mitigation only Fix from $1,6002025-04-27 HIGH 7.5 CVE-2024-24911 In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. Wh… Gaia Os Mitigation only Fix from $1,9502025-02-06 HIGH 7.8 CVE-2024-6233 Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate… Zonealarm Extreme Security Nextgen Mitigation only Fix from $1,9502024-11-22 HIGH 8.0 CVE-2024-24914 Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerabil… Gaia Os Mitigation only Fix from $1,9502024-11-07 MEDIUM 6.7 CVE-2024-24912 A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit … Harmony Endpoint Mitigation only Fix from $1,6002024-05-01 HIGH 7.8 CVE-2023-28134 Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first o… Endpoint Security No fix yet Fix from $1,9502023-11-12 HIGH 7.2 CVE-2023-28130EPSS 21% Local user may lead to privilege escalation using Gaia Portal hostnames page. Gaia Portal No fix yet Fix from $1,9502023-07-26 HIGH 7.8 CVE-2023-28133EPSS 6% Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file Endpoint Security Mitigation only Fix from $1,9502023-07-23 HIGH 7.8 CVE-2022-23742 Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. … Endpoint Security Mitigation only Fix from $1,9502022-05-12 HIGH 7.8 CVE-2021-30360 Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker c… Endpoint Security No fix yet Fix from $1,9502022-01-10 MEDIUM 5.3 CVE-2021-30357EPSS 23% SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially … Ssl Network Extender Mitigation only Fix from $1,6002021-06-08 HIGH 8.1 CVE-2021-30356 A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite… Identity Agent Mitigation only Fix from $1,9502021-04-22 HIGH 7.8 CVE-2020-6024 Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vu… Smartconsole Mitigation only Fix from $1,9502021-01-20 HIGH 7.8 CVE-2020-6021 Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes … Endpoint Security Mitigation only Fix from $1,9502020-12-03 MEDIUM 5.5 CVE-2020-6015 Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage… Endpoint Security Mitigation only Fix from $1,6002020-11-05 MEDIUM 6.5 CVE-2020-6014 Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-exis… Endpoint Security Mitigation only Fix from $1,6002020-11-02 MEDIUM 6.4 CVE-2020-6020 Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38,… Ica Management Portal Mitigation only Fix from $1,6002020-09-24 HIGH 7.5 CVE-2019-8462 In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configurati… Security Gateway Mitigation only Fix from $1,9502019-10-02 CRITICAL 9.8 CVE-2019-8459 Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This … Jumbo Hotfix For Endpoint Security Server Mitigation only Fix from $2,3002019-06-20 HIGH 7.0 CVE-2019-8454 A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another… Endpoint Security Mitigation only Fix from $1,9502019-04-29 MEDIUM 5.9 CVE-2019-8456EPSS 20% Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setu… Ipsec Vpn No fix yet Fix from $1,6002019-04-09 HIGH 7.1 CVE-2014-8952 Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the (1) IPS blade, … Security Gateway Mitigation only Fix from $1,9502014-11-16 HIGH 7.1 CVE-2014-8951 Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) U… Security Gateway Mitigation only Fix from $1,9502014-11-16