Skip to content
OpenAdvisories

Vendor

Proofpoint

22 known vulnerabilities.

Products

Enterprise Protection 9 Insider Threat Management 5 ITM Server 3 Threat Response Auto Pull 2 Proofpoint Enterprise Protection 2 Insider Threat Management (ITM) Server 1 Insider Threat Management < 7.14.3 0 Insider Threat Management Server < 7.14.3 0 Insider Threat Management < 7.14.3.69 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2024-3676

    The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerabil…

    Proofpoint Enterprise Protection
  • High 7.5
    CVE-2023-4801

    ITM MacOS Agent Improper Certificate Validation

    An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent…

    Proofpoint Insider Threat Management
  • High 8.8
    CVE-2023-0089 Public exploit

    Proofpoint Enterprise Protection webutils authenticated RCE

    The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.

    Proofpoint Enterprise Protection
  • High 7.8
    CVE-2022-46334

    Proofpoint Enterprise Protection Local Privilege Escalation

    Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below.

    Proofpoint Enterprise Protection
  • High 7.2
    CVE-2022-46333

    Proofpoint Enterprise Protection perl eval() arbitrary command execution

    The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below.

    Proofpoint Enterprise Protection