Proofpoint
28 CVEs across 15 Proofpoint products. Browse Proofpoint vulnerabilities, severities, and proof-of-concept exploits.
Proofpoint products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-8558 | Medium | 5.4 | 2025-11-03 | Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent… |
CVE-2024-10635 | Medium | 6.1 | 2025-04-28 | Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attach… |
CVE-2025-0431 | Medium | 5.8 | 2025-03-19 | Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections… |
CVE-2024-3676 | High | 7.5 | 2024-05-14 | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remot… |
CVE-2024-0862 | Medium | 5.0 | 2024-05-14 | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user t… |
CVE-2023-5770 | Medium | 5.3 | 2024-01-09 | Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML… |
CVE-2023-5771 | Medium | 6.1 | 2023-11-06 | Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a specially crafted email with HTML i… |
CVE-2023-4828 | Medium | 6.4 | 2023-09-13 | An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration… |
CVE-2023-4803 | Medium | 4.8 | 2023-09-13 | A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an… |
CVE-2023-4802 | Medium | 4.8 | 2023-09-13 | A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be use… |
CVE-2023-4801 | High | 7.5 | 2023-09-13 | An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent ne… |
CVE-2023-36002 | Medium | 4.3 | 2023-06-27 | A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network… |
CVE-2023-36000 | Medium | 6.5 | 2023-06-27 | A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent ne… |
CVE-2023-35998 | Medium | 4.6 | 2023-06-27 | A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write u… |
CVE-2023-2818 | Medium | 5.5 | 2023-06-27 | An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions… |
CVE-2023-2820 | Medium | 6.1 | 2023-06-14 | An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker… |
CVE-2023-2819 | Medium | 4.3 | 2023-06-14 | A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated… |
CVE-2023-0090 | Critical | 9.8 | 2023-03-08 | The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval in… |
CVE-2023-0089 | High | 8.8 | 2023-03-08 | The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval inje… |
CVE-2022-46334 | High | 7.8 | 2022-12-21 | Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. Th… |
CVE-2022-46333 | High | 7.2 | 2022-12-06 | The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands bey… |
CVE-2022-46332 | Critical | 9.6 | 2022-12-06 | The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous ema… |
CVE-2021-31608 | Medium | 4.3 | 2022-11-17 | Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control. |
CVE-2022-25294 | High | 7.8 | 2022-03-10 | Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run a… |
CVE-2021-40843 | High | 7.3 | 2021-10-13 | Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker with write access to the local dat… |
CVE-2021-40842 | Critical | 9.8 | 2021-10-13 | Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validatio… |
CVE-2021-39304 | High | 7.5 | 2021-10-13 | Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass. |
CVE-2021-34814 | High | 7.5 | 2021-10-13 | Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass. |
CVE-2020-14009 | Medium | 6.3 | 2021-05-07 | Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message with a malicious att… |
CVE-2021-27900 | High | 8.1 | 2021-04-06 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Console. This enables… |
CVE-2021-27899 | High | 7.4 | 2021-04-06 | The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server's certificate, whi… |
CVE-2021-22158 | High | 7.2 | 2021-04-06 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web Console. The vulner… |
CVE-2021-22157 | Medium | 6.1 | 2021-04-06 | Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows stored XSS. |
CVE-2021-22159 | High | 7.8 | 2021-01-26 | Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveIT) Agent for Window… |
CVE-2020-8884 | High | 8.8 | 2021-01-06 | rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arb… |
CVE-2020-10658 | Critical | 9.8 | 2021-01-06 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteImage AP… |
CVE-2020-10657 | High | 7.2 | 2021-01-06 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules fea… |
CVE-2020-10656 | Critical | 9.8 | 2021-01-06 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMo… |
CVE-2020-10655 | Critical | 9.8 | 2021-01-06 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMo… |
CVE-2019-20634 | Low | 3.7 | 2020-03-30 | An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-c… |
CVE-2019-19680 | High | 8.8 | 2020-01-13 | A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 and 8.14.2 respective… |
CVE-2011-1905 | | 2011-05-05 | Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 a… | |
CVE-2011-1904 | | 2011-05-05 | An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5… | |
CVE-2011-1903 | | 2011-05-05 | SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server… | |
CVE-2011-1902 | | 2011-05-05 | Directory traversal vulnerability in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server… | |
CVE-2011-1901 | | 2011-05-05 | The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0… | |
CVE-2004-2357 | | 2004-12-31 | The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, which allows remote attackers to read or… |