Proofpoint vulnerabilities
We track 7 vulnerabilities in Proofpoint products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.
Latest Proofpoint vulnerabilities
- 7.5 High severity
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper…
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under
- 7.5 High severity
Insider Threat Management: Improper Certificate Validation
An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent
- 9.8 Critical severity
enterprise_protection: Improper Control of Generation of Code
The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-stand
- 8.8 High severity
enterprise_protection: Improper Control of Generation of Code
The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.
- 7.8 High severity
enterprise_protection: Improper Privilege Management
Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below.
- 7.2 High severity
enterprise_protection: Improper Control of Generation of Code
The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below.
- 9.6 Critical severity
enterprise_protection: Improper Neutralization of Input During Web Page Generation
The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and be