Skip to content
OpenAdvisories

Vendor

Proofpoint

22 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-0090 Public exploit

    Proofpoint Enterprise Protection webservices unauthenticated RCE

    The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-stan…

  • Critical 9.6

    Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"

    The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and b…