What is CVE-2023-4801?

CVE-2023-4801 is a high-severity vulnerability in Proofpoint Insider Threat Management, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2023-09-13.

How severe is CVE-2023-4801?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Proofpoint Insider Threat Management

CVE-2023-4801

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.

Vulnerability class: Improper Certificate Validation

Published 2023-09-13 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.003 (15.1th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 15th percentile — 15.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.003 · change: +0.000

Affected products

Proofpoint Insider Threat Management — versions 0
Proofpoint Insider Threat Management

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-006 (Broken Link)
www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0006 (Vendor Advisory)

Frequently asked questions

What is CVE-2023-4801?: CVE-2023-4801 is a high-severity vulnerability in Proofpoint Insider Threat Management, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2023-09-13.
How severe is CVE-2023-4801?: High severity. CVSS v3 base score is 7.5 out of 10.