Proofpoint

Latest CVEs · RSS

• CVE-2025-8558 2025-11-03 · CVSS 2.3
  Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent
• CVE-2024-10635 2025-04-28 · CVSS 6.1
  Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachm
• CVE-2025-0431 2025-03-19 · CVSS 5.8
  Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections i
• CVE-2024-3676 2024-05-14 · CVSS 7.5
  The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote
• CVE-2024-0862 2024-05-14 · CVSS 5.0
  The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to
• CVE-2023-5770 2024-01-09 · CVSS 5.3
  Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML
• CVE-2023-5771 2023-11-06 · CVSS 6.1
  Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a specially crafted email with HTML in
• CVE-2023-4828 2023-09-13 · CVSS 6.4
  An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration o
• CVE-2023-4803 2023-09-13 · CVSS 4.8
  A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an
• CVE-2023-4802 2023-09-13 · CVSS 4.8
  A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used
• CVE-2023-4801 2023-09-13 · CVSS 7.5
  An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent net
• CVE-2023-36002 2023-06-27 · CVSS 4.3
  A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network
• CVE-2023-36000 2023-06-27 · CVSS 6.5
  A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent net
• CVE-2023-35998 2023-06-27 · CVSS 4.6
  A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write un
• CVE-2023-2818 2023-06-27 · CVSS 5.5
  An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions
• CVE-2023-2820 2023-06-14 · CVSS 6.1
  An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker o
• CVE-2023-2819 2023-06-14 · CVSS 4.3
  A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated a
• CVE-2023-0090 2023-03-08 · CVSS 9.8
  The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval inj
• CVE-2023-0089 2023-03-08 · CVSS 8.8
  The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injec
• CVE-2022-46334 2022-12-21 · CVSS 7.8
  Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. Thi
• CVE-2022-46333 2022-12-06 · CVSS 7.2
  The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyo
• CVE-2022-46332 2022-12-06 · CVSS 9.6
  The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous emai