Enterprise Protection vulnerabilities

6 known vulnerabilities in Enterprise Protection from Proofpoint. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper…

  CVE-2024-3676May 14, 2024Proofpoint

  The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under

• 9.8 Critical severity

  enterprise_protection: Improper Control of Generation of Code

  CVE-2023-0090Mar 8, 2023Proofpoint

  The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-stand

• 8.8 High severity

  enterprise_protection: Improper Control of Generation of Code

  CVE-2023-0089Mar 8, 2023Proofpoint

  The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.

• 7.8 High severity

  enterprise_protection: Improper Privilege Management

  CVE-2022-46334Dec 21, 2022Proofpoint

  Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below.

• 7.2 High severity

  enterprise_protection: Improper Control of Generation of Code

  CVE-2022-46333Dec 6, 2022ProofpointEPSS 1.54%

  The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below.

• 9.6 Critical severity

  enterprise_protection: Improper Neutralization of Input During Web Page Generation

  CVE-2022-46332Dec 6, 2022Proofpoint

  The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and be