PProofpoint

Products

Exploited and recent CVEs

• CVE-2025-8558 Low 2.3 Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration 0.6%
• CVE-2024-10635 Medium 6.1 Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass 0.3%
• CVE-2025-0431 Medium 5.8 Enterprise Protection Backslash URL Rewrite Bypass 0.4%
• CVE-2024-3676 High 7.5 The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP 0.4%
• CVE-2024-0862 Medium 5.0 The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection 0.2%
• CVE-2023-5770 Medium 5.3 HTML injection in email body through email subject 0.3%
• CVE-2023-5771 Medium 6.1 HTML injection in AdminUI through email subject 0.3%
• CVE-2023-4828 Medium 6.4 ITM Server Communications Hijack 0.4%
• CVE-2023-4803 Medium 4.8 ITM Server Cross-site Scripting in WriteWindowTitle Endpoint 0.4%
• CVE-2023-4802 Medium 4.8 ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint 0.4%
• CVE-2023-4801 High 7.5 ITM MacOS Agent Improper Certificate Validation 0.3%
• CVE-2023-36002 Medium 4.3 ITM Server Missing Authorization for URL validation 0.3%
• CVE-2023-36000 Medium 6.5 ITM Server Missing Authorization for Agent Config 0.3%
• CVE-2023-35998 Medium 4.6 ITM Server Missing Authorization in SOAP Endpoints 0.2%
• CVE-2023-2818 Medium 5.5 ITM Windows Agent Insecure Filesystem Permissions 0.2%
• CVE-2023-2820 Medium 6.1 An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent network to obtain credenti 0.2%
• CVE-2023-2819 Medium 4.3 A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to r 0.3%
• CVE-2023-0090 Critical 9.8 Proofpoint Enterprise Protection webservices unauthenticated RCE 0.7%
• CVE-2023-0089 High 8.8 Proofpoint Enterprise Protection webutils authenticated RCE 0.7%
• CVE-2022-46334 High 7.8 Proofpoint Enterprise Protection Local Privilege Escalation 0.2%
• CVE-2022-46333 High 7.2 Proofpoint Enterprise Protection perl eval() arbitrary command execution 1.5%
• CVE-2022-46332 Critical 9.6 Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names" 0.7%