What is CVE-2021-22158?

CVE-2021-22158 is a high-severity vulnerability in Proofpoint Insider Threat Management, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.2/10. Published 2021-04-06.

How severe is CVE-2021-22158?

High severity. CVSS v3 base score is 7.2 out of 10.

XXE in Proofpoint Insider Threat Management

CVE-2021-22158

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web Console. The vulnerability requires admin user privileges and knowledge of the XML file's encryption key to successfully exploit. All versions before 7.11 are affected.

Vulnerability class: XXE (XML External Entity)

EPSS: 0.006 (46.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Proofpoint Insider_threat_management
N/a — versions n/a

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-22158?: CVE-2021-22158 is a high-severity vulnerability in Proofpoint Insider Threat Management, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.2/10. Published 2021-04-06.
How severe is CVE-2021-22158?: High severity. CVSS v3 base score is 7.2 out of 10.