Check Point Mobile Access vulnerabilities

3 CVEs affecting Check Point Mobile Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-52885, published 2025-08-06.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-52885, published 2025-08-06. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to…
• CVE-2024-52888, published 2025-04-27. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.
• CVE-2024-52887, published 2025-04-27. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.