Advisories · Technology
Proofpoint Enterprise Protection.
Every CVE that names Proofpoint Enterprise Protection among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass
- Proofpoint Enterprise Protection
- CWE-754
- CVSS 5.8 Medium
Enterprise Protection Backslash URL Rewrite Bypass
- Proofpoint Enterprise Protection
- CWE-790
- CVSS 7.5 High
Improper input validation in Proofpoint Enterprise Protection
- Proofpoint Enterprise Protection
- CWE-20
- CVSS 5.0 Medium
Server-side request forgery in Proofpoint Enterprise Protection
- Proofpoint Enterprise Protection
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
HTML injection in email body through email subject
- Proofpoint Enterprise Protection
- CWE-838
- CVSS 6.1 Medium
HTML injection in AdminUI through email subject
- Proofpoint Enterprise Protection
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
Proofpoint Enterprise Protection webservices unauthenticated RCE
- proofpoint enterprise_protection
- Code injection
- CVSS 8.8 High
Proofpoint Enterprise Protection webutils authenticated RCE
- proofpoint enterprise_protection
- Code injection
- CVSS 7.8 High
Proofpoint Enterprise Protection Local Privilege Escalation
- Proofpoint enterprise_protection
- Privilege escalation
- CVSS 7.2 High
Proofpoint Enterprise Protection perl eval() arbitrary command execution
- proofpoint enterprise_protection
- Code injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"
- proofpoint enterprise_protection
- Cross-site scripting (XSS)