Input Validation and Logic

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Local user may lead to privilege escalation using Gaia Portal hostnames page.CVE-2023-28130Checkpoint · CVSS 7.2 · 21% likely

   CWE-20

2. Administrator with policy and NAT permissions can bypass Sync network protection on Scalable PlatformsCVE-2026-120490checkpoint · CVSS 3.8 · 8.4% likely

   CWE-696

3. In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging.CVE-2019-8462Checkpoint · 1.3% likely

   CWE-755

4. Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run com…CVE-2020-6020Checkpoint · 0.5% likely

   CWE-20

5. vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in a METHOD_NEITHER (1)…CVE-2007-4216Checkpoint · 0.4% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.