Skip to content
Noroxi

Proofpoint records

45 published records for vendor proofpoint.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
40%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

45 records
  • CVE-2020-10658
    40Plan

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser

    CriticalCVSS 9.8No exploitEPSS 3%

    proofpoint · insider threat management serverJan 6, 2021

  • CVE-2020-10655
    40Plan

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser

    CriticalCVSS 9.8No exploitEPSS 3%

    proofpoint · insider threat management serverJan 6, 2021

  • CVE-2020-10656
    40Plan

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser

    CriticalCVSS 9.8No exploitEPSS 3%

    proofpoint · insider threat management serverJan 6, 2021

  • CVE-2021-40842
    39Monitor

    Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console.

    CriticalCVSS 9.8No exploitEPSS 1%

    proofpoint · insider threat management serverOct 13, 2021

  • CVE-2023-0090
    39Monitor

    Proofpoint Enterprise Protection webservices unauthenticated RCE

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    proofpoint · enterprise protectionMar 7, 2023

  • CVE-2022-46332
    38Monitor

    Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"

    CriticalCVSS 9.6No exploitEPSS 1%

    proofpoint · enterprise protectionDec 6, 2022

  • CVE-2020-8884
    36Monitor

    rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated u

    HighCVSS 8.8No exploitEPSS 4%

    proofpoint · insider threat managementJan 6, 2021

  • CVE-2019-19680
    35Monitor

    A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 an

    HighCVSS 8.8No exploitEPSS 1%

    proofpoint · enterprise protectionJan 13, 2020

  • CVE-2023-0089
    35Monitor

    Proofpoint Enterprise Protection webutils authenticated RCE

    HighCVSS 8.8Proof of conceptEPSS 1%

    proofpoint · enterprise protectionMar 7, 2023

  • CVE-2021-27900
    33Monitor

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Co

    HighCVSS 8.1No exploitEPSS 2%

    proofpoint · insider threat managementApr 6, 2021

  • CVE-2011-1904
    31Monitor

    An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protecti

    HighCVSS 7.5No exploitEPSS 2%

    proofpoint · messaging security gatewayMay 5, 2011

  • CVE-2011-1901
    31Monitor

    The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3

    HighCVSS 7.5No exploitEPSS 2%

    proofpoint · messaging security gatewayMay 5, 2011

  • CVE-2021-22159
    31Monitor

    Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveI

    HighCVSS 7.8No exploitEPSS 0%

    proofpoint · insider threat managementJan 26, 2021

  • CVE-2022-25294
    31Monitor

    Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Wi

    HighCVSS 7.8No exploitEPSS 0%

    proofpoint · insider threat managementMar 10, 2022

  • CVE-2022-46334
    31Monitor

    Proofpoint Enterprise Protection Local Privilege Escalation

    HighCVSS 7.8No exploitEPSS 0%

    proofpoint · enterprise protectionDec 21, 2022

  • CVE-2011-1903
    30Monitor

    SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoin

    HighCVSS 7.5No exploitEPSS 1%

    proofpoint · messaging security gatewayMay 5, 2011

  • CVE-2021-34814
    30Monitor

    Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass.

    HighCVSS 7.5No exploitEPSS 1%

    proofpoint · spam engineOct 13, 2021

  • CVE-2021-39304
    30Monitor

    Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.

    HighCVSS 7.5No exploitEPSS 1%

    proofpoint · enterprise protectionOct 13, 2021

  • CVE-2024-3676
    30Monitor

    The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an un

    HighCVSS 7.5No exploitEPSS 0%

    proofpoint · enterprise protectionMay 14, 2024

  • CVE-2023-4801
    30Monitor

    ITM MacOS Agent Improper Certificate Validation

    HighCVSS 7.5No exploitEPSS 0%

    proofpoint · insider threat managementSep 13, 2023

  • CVE-2020-10657
    29Monitor

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's I

    HighCVSS 7.2No exploitEPSS 3%

    proofpoint · insider threat management serverJan 6, 2021

  • CVE-2021-27899
    29Monitor

    The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server

    HighCVSS 7.4No exploitEPSS 1%

    proofpoint · insider threat managementApr 6, 2021

  • CVE-2021-40843
    29Monitor

    Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console.

    HighCVSS 7.3No exploitEPSS 0%

    proofpoint · insider threat management serverOct 13, 2021

  • CVE-2022-46333
    28Monitor

    Proofpoint Enterprise Protection perl eval() arbitrary command execution

    HighCVSS 7.2No exploitEPSS 2%

    proofpoint · enterprise protectionDec 6, 2022

  • CVE-2021-22158
    28Monitor

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web

    HighCVSS 7.2No exploitEPSS 1%

    proofpoint · insider threat managementApr 6, 2021