https://vulnogram.org/ Most recent CVEs assigned by Proofpoint Inc. (proofpoint). https://vulnogram.org/seaview/icons/proofpoint.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2025-8558 https://vulnogram.org/CVE-2025-8558 Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the l… Low Mon, 03 Nov 2025 18:40:03 GMT https://vulnogram.org/CVE-2024-10635 https://vulnogram.org/CVE-2024-10635 Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signa… Medium Network Exploitable Mon, 28 Apr 2025 20:36:43 GMT https://vulnogram.org/CVE-2025-0431 https://vulnogram.org/CVE-2025-0431 Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of back… Medium Network Exploitable Wed, 19 Mar 2025 16:18:23 GMT https://vulnogram.org/CVE-2024-3676 https://vulnogram.org/CVE-2024-3676 The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accou… High Network Exploitable Tue, 14 May 2024 19:07:19 GMT https://vulnogram.org/CVE-2024-0862 https://vulnogram.org/CVE-2024-0862 The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses. Medium Tue, 14 May 2024 19:07:04 GMT https://vulnogram.org/CVE-2023-5770 https://vulnogram.org/CVE-2023-5770 Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by… Medium Network Exploitable Tue, 09 Jan 2024 22:02:03 GMT https://vulnogram.org/CVE-2023-5771 https://vulnogram.org/CVE-2023-5771 Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a specially crafted email with HTML in the subject which triggers XSS when viewing quarantined messages. This issue affects Proo… Medium Network Exploitable Mon, 06 Nov 2023 20:06:28 GMT https://vulnogram.org/CVE-2023-4828 https://vulnogram.org/CVE-2023-4828 An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an att… Medium Wed, 13 Sep 2023 15:16:13 GMT https://vulnogram.org/CVE-2023-4803 https://vulnogram.org/CVE-2023-4803 A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console adminis… Medium Wed, 13 Sep 2023 15:15:40 GMT https://vulnogram.org/CVE-2023-4802 https://vulnogram.org/CVE-2023-4802 A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console… Medium Wed, 13 Sep 2023 15:15:06 GMT https://vulnogram.org/CVE-2023-4801 https://vulnogram.org/CVE-2023-4801 An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after… High Wed, 13 Sep 2023 15:14:36 GMT https://vulnogram.org/CVE-2023-36002 https://vulnogram.org/CVE-2023-36002 A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected. Medium Tue, 27 Jun 2023 14:32:26 GMT https://vulnogram.org/CVE-2023-36000 https://vulnogram.org/CVE-2023-36000 A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to obtain sensitive information. Successful exploitation requires an attacker to firs… Medium Tue, 27 Jun 2023 14:32:01 GMT https://vulnogram.org/CVE-2023-35998 https://vulnogram.org/CVE-2023-35998 A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid a… Medium Tue, 27 Jun 2023 14:30:53 GMT https://vulnogram.org/CVE-2023-2818 https://vulnogram.org/CVE-2023-2818 An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected. Medium Tue, 27 Jun 2023 14:29:49 GMT https://vulnogram.org/CVE-2023-2820 https://vulnogram.org/CVE-2023-2820 An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent network to obtain credentials to integrated services via a man-in-the-middle… Medium Wed, 14 Jun 2023 21:26:31 GMT https://vulnogram.org/CVE-2023-2819 https://vulnogram.org/CVE-2023-2819 A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type.… Medium Wed, 14 Jun 2023 21:14:38 GMT https://vulnogram.org/CVE-2023-0090 https://vulnogram.org/CVE-2023-0090 The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a… Critical Network Exploitable Wed, 08 Mar 2023 00:27:36 GMT https://vulnogram.org/CVE-2023-0089 https://vulnogram.org/CVE-2023-0089 The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below. High Wed, 08 Mar 2023 00:27:25 GMT https://vulnogram.org/CVE-2022-46334 https://vulnogram.org/CVE-2022-46334 Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below. High Wed, 21 Dec 2022 20:05:38 GMT https://vulnogram.org/CVE-2022-46333 https://vulnogram.org/CVE-2022-46333 The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below. High Tue, 06 Dec 2022 19:52:36 GMT https://vulnogram.org/CVE-2022-46332 https://vulnogram.org/CVE-2022-46332 The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.1… Critical Network Exploitable Tue, 06 Dec 2022 19:52:02 GMT