Known Vulnerabilities for products from Proofpoint

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Proofpoint".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2023-36002 json A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymo... 4.3 - MEDIUM 2023-06-27 2023-07-06
CVE-2023-36000 json A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an an... 6.5 - MEDIUM 2023-06-27 2023-07-06
CVE-2023-35998 json A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an ad... 4.6 - MEDIUM 2023-06-27 2023-07-06
CVE-2023-5771 json Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a s... 6.1 - MEDIUM 2023-11-06 2023-11-14
CVE-2023-4828 json An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to ... 4.2 - MEDIUM 2023-09-13 2023-10-13
CVE-2023-4803 json A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server... 4.8 - MEDIUM 2023-09-13 2023-10-13
CVE-2023-4802 json A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM)... 4.8 - MEDIUM 2023-09-13 2023-10-13
CVE-2023-4801 json An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an... 7.5 - HIGH 2023-09-13 2023-09-15
CVE-2023-2820 json An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/T... 6.8 - MEDIUM 2023-06-14 2023-06-28
CVE-2023-2819 json A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/T... 4.3 - MEDIUM 2023-06-14 2023-11-07
CVE-2023-2818 json An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disr... 5.5 - MEDIUM 2023-06-27 2023-07-06
CVE-2023-0090 json The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to ex... 9.8 - CRITICAL 2023-03-08 2023-07-12
CVE-2023-0089 json The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execu... 8.8 - HIGH 2023-03-08 2023-11-07
CVE-2022-46334 json Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges ... 7.8 - HIGH 2022-12-21 2023-07-11
CVE-2022-46333 json The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enable... 7.2 - HIGH 2022-12-06 2023-07-12
CVE-2022-46332 json The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerabi... 9.6 - CRITICAL 2022-12-06 2023-11-07
CVE-2022-25294 json Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unpriv... 7.8 - HIGH 2022-03-10 2022-03-18
CVE-2021-40843 json Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker ... 7.3 - HIGH 2021-10-13 2021-10-19
CVE-2021-40842 json Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exis... 9.8 - CRITICAL 2021-10-13 2021-10-19
CVE-2021-39304 json Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass. 7.5 - HIGH 2021-10-13 2021-10-19
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Proofpoint

Type Vendor Product Version
ApplicationProofpointEmail Protection-
ApplicationProofpointEnterprise Protection-
ApplicationProofpointInsider Threat Management6.3
ApplicationProofpointInsider Threat Management Server-

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report