security@proofpoint.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS security@proofpoint.com
03
assessed vulnerabilities (22)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-8558US | medium5.4OT elevated | — | ||
Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform a… | ||||
| CVE-2024-10635US | medium5.3 | — | ||
Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning securit… | ||||
| CVE-2025-0431US | — | — | ||
Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integri… | ||||
| CVE-2024-3676US | — | — | ||
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a spe… | ||||
| CVE-2024-0862US | — | — | ||
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests… | ||||
| CVE-2023-5770US | medium5.4 | — | ||
Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body… | ||||
| CVE-2023-5771US | medium6.1 | — | ||
Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a specially crafted email with HTML in the subject which t… | ||||
| CVE-2023-4828US | medium4.2 | — | ||
An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-regist… | ||||
| CVE-2023-4803US | medium4.8 | — | ||
A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated admini… | ||||
| CVE-2023-4802US | medium4.8 | — | ||
A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated… | ||||
| CVE-2023-4801US | high7.5 | — | ||
An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a… | ||||
| CVE-2023-36002US | medium4.3OT elevated | — | ||
A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content v… | ||||
| CVE-2023-36000US | medium6.5OT elevated | — | ||
A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensi… | ||||
| CVE-2023-35998US | medium4.6OT elevated | — | ||
A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects.… | ||||
| CVE-2023-2818US | medium5.5 | — | ||
An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are… | ||||
| CVE-2023-2820US | medium6.8 | — | ||
An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent networ… | ||||
| CVE-2023-2819US | medium4.3 | — | ||
A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an a… | ||||
| CVE-2023-0090US | critical9.8 | Exploit | ||
The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitati… | ||||
| CVE-2023-0089US | high8.8 | Exploit | ||
The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'.
This affects… | ||||
| CVE-2022-46334US | high7.8 | — | ||
Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versio… | ||||