Skip to content

Proofpoint vulnerabilities

Products

Newest

proofpoint insider threat management (itm) server, insider threat management server +1 more Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass... CVE-2025-8558 2.3 LowNovember 3, 2025
proofpoint enterprise protection Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass CVE-2024-10635 6.1 MediumApril 28, 2025
proofpoint enterprise protection Enterprise Protection Backslash URL Rewrite Bypass CVE-2025-0431 5.8 MediumMarch 19, 2025
proofpoint enterprise protection The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input... CVE-2024-3676 7.5 HighMay 14, 2024
proofpoint enterprise protection The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side... CVE-2024-0862 5.0 MediumMay 14, 2024
proofpoint enterprise protection HTML injection in email body through email subject CVE-2023-5770 5.3 MediumJanuary 9, 2024
proofpoint enterprise protection HTML injection in AdminUI through email subject CVE-2023-5771 6.1 MediumNovember 6, 2023
proofpoint insider threat management, itm server, insider threat management server +2 more ITM Server Communications Hijack CVE-2023-4828 6.4 MediumSeptember 13, 2023
proofpoint insider threat management, itm server +1 more ITM Server Cross-site Scripting in WriteWindowTitle Endpoint CVE-2023-4803 4.8 MediumSeptember 13, 2023
proofpoint insider threat management, itm server +1 more ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint CVE-2023-4802 4.8 MediumSeptember 13, 2023
proofpoint insider threat management ITM MacOS Agent Improper Certificate Validation CVE-2023-4801 7.5 HighSeptember 13, 2023
proofpoint insider threat management, insider threat management server +1 more ITM Server Missing Authorization for URL validation CVE-2023-36002 4.3 MediumJune 27, 2023
proofpoint insider threat management, insider threat management server +1 more ITM Server Missing Authorization for Agent Config CVE-2023-36000 6.5 MediumJune 27, 2023
proofpoint insider threat management, insider threat management server +1 more ITM Server Missing Authorization in SOAP Endpoints CVE-2023-35998 4.6 MediumJune 27, 2023
proofpoint insider threat management ITM Windows Agent Insecure Filesystem Permissions CVE-2023-2818 5.5 MediumJune 27, 2023
proofpoint threat response auto pull An information disclosure vulnerability in the?faye endpoint in Proofpoint Threat Response /... CVE-2023-2820 6.1 MediumJune 14, 2023
proofpoint threat response auto pull A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/... CVE-2023-2819 4.3 MediumJune 14, 2023
proofpoint enterprise protection Proofpoint Enterprise Protection webservices unauthenticated RCE CVE-2023-0090 Public exploit 9.8 CriticalMarch 8, 2023
proofpoint enterprise protection Proofpoint Enterprise Protection webutils authenticated RCE CVE-2023-0089 Public exploit 8.8 HighMarch 8, 2023
proofpoint enterprise protection Proofpoint Enterprise Protection Local Privilege Escalation CVE-2022-46334 7.8 HighDecember 21, 2022
proofpoint enterprise protection Proofpoint Enterprise Protection perl eval() arbitrary command execution CVE-2022-46333 7.2 HighDecember 6, 2022
proofpoint enterprise protection Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names" CVE-2022-46332 9.6 CriticalDecember 6, 2022
proofpoint enterprise protection Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control. CVE-2021-31608 4.3 MediumNovember 17, 2022
proofpoint insider threat management Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function... CVE-2022-25294 7.8 HighMarch 7, 2022
proofpoint insider threat management server Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web... CVE-2021-40842 9.8 CriticalOctober 13, 2021
proofpoint insider threat management server Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in... CVE-2021-40843 7.3 HighOctober 13, 2021
proofpoint enterprise protection Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass. CVE-2021-39304 7.5 HighOctober 13, 2021
proofpoint spam engine Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass. CVE-2021-34814 7.5 HighOctober 13, 2021
proofpoint enterprise protection Proofpoint Enterprise Protection (PPS/PoD) before 8.17.0 contains a vulnerability that could... CVE-2020-14009 6.3 MediumMay 7, 2021
proofpoint insider threat management The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an... CVE-2021-27900 8.1 HighApril 6, 2021
proofpoint insider threat management The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML... CVE-2021-22158 7.2 HighApril 6, 2021
proofpoint insider threat management The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux... CVE-2021-27899 7.4 HighApril 6, 2021
proofpoint insider threat management Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows... CVE-2021-22157 6.1 MediumApril 6, 2021
proofpoint insider threat management Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint... CVE-2021-22159 7.8 HighJanuary 26, 2021
proofpoint insider threat management rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows... CVE-2020-8884 8.8 HighJanuary 6, 2021
proofpoint insider threat management server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains... CVE-2020-10658 9.8 CriticalJanuary 6, 2021
proofpoint insider threat management server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains... CVE-2020-10657 7.2 HighJanuary 6, 2021
proofpoint insider threat management server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains... CVE-2020-10656 9.8 CriticalJanuary 6, 2021
proofpoint insider threat management server The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains... CVE-2020-10655 9.8 CriticalJanuary 6, 2021
proofpoint email protection An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores... CVE-2019-20634 3.7 LowMarch 30, 2020
proofpoint enterprise protection A file-extension filtering vulnerability in ProofPoint Protection Server Email Firewall through 8... CVE-2019-19680 8.8 HighJanuary 13, 2020
proofpoint messaging security gateway, protection server +1 more Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules... CVE-2011-1905 6.8 MediumMay 5, 2011
proofpoint messaging security gateway, protection server +1 more An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6... CVE-2011-1904 7.5 HighMay 5, 2011
proofpoint messaging security gateway, protection server +1 more SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6... CVE-2011-1903 7.5 HighMay 5, 2011
proofpoint messaging security gateway, protection server +1 more Directory traversal vulnerability in the web interface in Proofpoint Messaging Security Gateway 6... CVE-2011-1902 5.0 MediumMay 5, 2011
proofpoint messaging security gateway, protection server +1 more The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and... CVE-2011-1901 7.5 HighMay 5, 2011
proofpoint protection server The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for... CVE-2004-2357 6.4 MediumDecember 31, 2004