checkpoint Vulnerability Advisory Catalog

Total 125 security vulnerabilities recorded for checkpoint software and firmware.

← Back to All Vendors
Component: zonealarm

Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissi...

📅 2022-05-11
CVSS 7.8 Dossier →
Component: endpoint_security

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker ca...

📅 2022-01-10
CVSS 7.8 Dossier →
Component: harmony_browse

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because t...

📅 2021-10-22
CVSS 7.8 Dossier →
Component: mobile_access_portal_agent

Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locatio...

📅 2021-10-19
CVSS 7.2 Dossier →
Component: ssl_network_extender

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially d...

📅 2021-06-08
CVSS 5.3 Dossier →
Component: identity_agent

A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite ...

📅 2021-04-22
CVSS 8.1 Dossier →
Component: smartconsole

Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vul...

📅 2021-01-20
CVSS 7.8 Dossier →
Component: endpoint_security

Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes p...

📅 2020-12-03
CVSS 7.8 Dossier →
CVE-2020-6015 MEDIUM
Component: endpoint_security

Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage ...

📅 2020-11-05
CVSS 5.5 Dossier →
CVE-2020-6014 MEDIUM
Component: endpoint_security

Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-exist...

📅 2020-11-02
CVSS 6.5 Dossier →
Component: zonealarm

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware....

📅 2020-10-27
CVSS 7.8 Dossier →
CVE-2020-6022 MEDIUM
Component: zonealarm

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware....

📅 2020-10-27
CVSS 5.5 Dossier →
CVE-2020-6020 MEDIUM
Component: ica_management_portal

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, ...

📅 2020-09-24
CVSS 6.4 Dossier →
Component: zonealarm_anti-ransomware

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can ...

📅 2020-08-04
CVSS 7.4 Dossier →
Component: zonealarm_extreme_security

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elev...

📅 2020-07-06
CVSS 8.8 Dossier →
Component: endpoint_security_clients

A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to...

📅 2019-12-23
CVSS 7.5 Dossier →
Component: security_gateway

In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuratio...

📅 2019-10-02
CVSS 7.5 Dossier →
Component: capsule_docs_standalone_client

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image withou...

📅 2019-08-29
CVSS 7.8 Dossier →
CVE-2019-8459 CRITICAL
Component: jumbo_hotfix_for_endpoint_security_server

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This c...

📅 2019-06-20
CVSS 9.8 Dossier →
CVE-2019-8458 MEDIUM
Component: endpoint_security_clients

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an...

📅 2019-06-20
CVSS 4.4 Dossier →
Component: endpoint_security

A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another ...

📅 2019-04-29
CVSS 7.0 Dossier →
Component: endpoint_security

A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to...

📅 2019-04-22
CVSS 7.8 Dossier →
Component: zonealarm

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all us...

📅 2019-04-17
CVSS 7.1 Dossier →
CVE-2019-8453 MEDIUM
Component: zonealarm

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a lo...

📅 2019-04-17
CVSS 5.5 Dossier →
Page 2 of 6 (125 Total Records)