Записи Proofpoint
45 опубликованных записей вендора proofpoint.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 7
- С записью об исправлении
- 40 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-502 Deserialization of Untrusted Data6
- CWE-862 Missing Authorization4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-754 Improper Check for Unusual or Exceptional Conditions2
- CWE-295 Improper Certificate Validation2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
45 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
40В плане | CVE-2020-10658Эксплойта нет | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application serproofpoint · insider threat management server · CWE-502 | Критическая9,8 | — | 2,7 % | 6 янв. 2021 г. |
40В плане | CVE-2020-10655Эксплойта нет | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application serproofpoint · insider threat management server · CWE-502 | Критическая9,8 | — | 2,6 % | 6 янв. 2021 г. |
40В плане | CVE-2020-10656Эксплойта нет | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application serproofpoint · insider threat management server · CWE-502 | Критическая9,8 | — | 2,6 % | 6 янв. 2021 г. |
39Наблюдать | CVE-2021-40842Эксплойта нет | Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console.proofpoint · insider threat management server · CWE-89 | Критическая9,8 | — | 1,0 % | 13 окт. 2021 г. |
39Наблюдать | CVE-2023-0090Proof of concept | Proofpoint Enterprise Protection webservices unauthenticated RCEproofpoint · enterprise protection · CWE-95 | Критическая9,8 | — | 0,7 % | 7 мар. 2023 г. |
38Наблюдать | CVE-2022-46332Эксплойта нет | Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"proofpoint · enterprise protection · CWE-79 | Критическая9,6 | — | 0,6 % | 6 дек. 2022 г. |
36Наблюдать | CVE-2020-8884Эксплойта нет | rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated uproofpoint · insider threat management · CWE-502 | Высокая8,8 | — | 4,1 % | 6 янв. 2021 г. |
35Наблюдать | CVE-2019-19680Эксплойта нет | A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 anproofpoint · enterprise protection | Высокая8,8 | — | 1,1 % | 13 янв. 2020 г. |
35Наблюдать | CVE-2023-0089Proof of concept | Proofpoint Enterprise Protection webutils authenticated RCEproofpoint · enterprise protection · CWE-95 | Высокая8,8 | — | 0,7 % | 7 мар. 2023 г. |
33Наблюдать | CVE-2021-27900Эксплойта нет | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Coproofpoint · insider threat management · CWE-862 | Высокая8,1 | — | 2,5 % | 6 апр. 2021 г. |
31Наблюдать | CVE-2011-1904Эксплойта нет | An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protectiproofpoint · messaging security gateway · CWE-78 | Высокая7,5 | — | 2,4 % | 5 мая 2011 г. |
31Наблюдать | CVE-2011-1901Эксплойта нет | The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3proofpoint · messaging security gateway · CWE-287 | Высокая7,5 | — | 2,0 % | 5 мая 2011 г. |
31Наблюдать | CVE-2021-22159Эксплойта нет | Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveIproofpoint · insider threat management · CWE-306 | Высокая7,8 | — | 0,3 % | 26 янв. 2021 г. |
31Наблюдать | CVE-2022-25294Эксплойта нет | Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Wiproofpoint · insider threat management | Высокая7,8 | — | 0,3 % | 10 мар. 2022 г. |
31Наблюдать | CVE-2022-46334Эксплойта нет | Proofpoint Enterprise Protection Local Privilege Escalationproofpoint · enterprise protection · CWE-269 | Высокая7,8 | — | 0,2 % | 21 дек. 2022 г. |
30Наблюдать | CVE-2011-1903Эксплойта нет | SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoinproofpoint · messaging security gateway · CWE-89 | Высокая7,5 | — | 1,3 % | 5 мая 2011 г. |
30Наблюдать | CVE-2021-34814Эксплойта нет | Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass.proofpoint · spam engine | Высокая7,5 | — | 1,0 % | 13 окт. 2021 г. |
30Наблюдать | CVE-2021-39304Эксплойта нет | Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.proofpoint · enterprise protection | Высокая7,5 | — | 1,0 % | 13 окт. 2021 г. |
30Наблюдать | CVE-2024-3676Эксплойта нет | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unproofpoint · enterprise protection · CWE-20 | Высокая7,5 | — | 0,4 % | 14 мая 2024 г. |
30Наблюдать | CVE-2023-4801Эксплойта нет | ITM MacOS Agent Improper Certificate Validationproofpoint · insider threat management · CWE-295 | Высокая7,5 | — | 0,3 % | 13 сент. 2023 г. |
29Наблюдать | CVE-2020-10657Эксплойта нет | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's Iproofpoint · insider threat management server · CWE-502 | Высокая7,2 | — | 2,5 % | 6 янв. 2021 г. |
29Наблюдать | CVE-2021-27899Эксплойта нет | The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Serverproofpoint · insider threat management · CWE-295 | Высокая7,4 | — | 0,6 % | 6 апр. 2021 г. |
29Наблюдать | CVE-2021-40843Эксплойта нет | Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console.proofpoint · insider threat management server · CWE-502 | Высокая7,3 | — | 0,5 % | 13 окт. 2021 г. |
28Наблюдать | CVE-2022-46333Эксплойта нет | Proofpoint Enterprise Protection perl eval() arbitrary command executionproofpoint · enterprise protection · CWE-94 | Высокая7,2 | — | 1,5 % | 6 дек. 2022 г. |
28Наблюдать | CVE-2021-22158Эксплойта нет | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web proofpoint · insider threat management · CWE-611 | Высокая7,2 | — | 0,6 % | 6 апр. 2021 г. |
- CVE-2020-1065840В плане
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %proofpoint · insider threat management server6 янв. 2021 г.
- CVE-2020-1065540В плане
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %proofpoint · insider threat management server6 янв. 2021 г.
- CVE-2020-1065640В плане
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %proofpoint · insider threat management server6 янв. 2021 г.
- CVE-2021-4084239Наблюдать
Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %proofpoint · insider threat management server13 окт. 2021 г.
- CVE-2023-009039Наблюдать
Proofpoint Enterprise Protection webservices unauthenticated RCE
КритическаяCVSS 9,8Proof of conceptEPSS 1 %proofpoint · enterprise protection7 мар. 2023 г.
- CVE-2022-4633238Наблюдать
Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"
КритическаяCVSS 9,6Эксплойта нетEPSS 1 %proofpoint · enterprise protection6 дек. 2022 г.
- CVE-2020-888436Наблюдать
rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated u
ВысокаяCVSS 8,8Эксплойта нетEPSS 4 %proofpoint · insider threat management6 янв. 2021 г.
- CVE-2019-1968035Наблюдать
A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 an
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %proofpoint · enterprise protection13 янв. 2020 г.
- CVE-2023-008935Наблюдать
Proofpoint Enterprise Protection webutils authenticated RCE
ВысокаяCVSS 8,8Proof of conceptEPSS 1 %proofpoint · enterprise protection7 мар. 2023 г.
- CVE-2021-2790033Наблюдать
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Co
ВысокаяCVSS 8,1Эксплойта нетEPSS 2 %proofpoint · insider threat management6 апр. 2021 г.
- CVE-2011-190431Наблюдать
An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protecti
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %proofpoint · messaging security gateway5 мая 2011 г.
- CVE-2011-190131Наблюдать
The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %proofpoint · messaging security gateway5 мая 2011 г.
- CVE-2021-2215931Наблюдать
Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveI
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %proofpoint · insider threat management26 янв. 2021 г.
- CVE-2022-2529431Наблюдать
Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Wi
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %proofpoint · insider threat management10 мар. 2022 г.
- CVE-2022-4633431Наблюдать
Proofpoint Enterprise Protection Local Privilege Escalation
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %proofpoint · enterprise protection21 дек. 2022 г.
- CVE-2011-190330Наблюдать
SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoin
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %proofpoint · messaging security gateway5 мая 2011 г.
- CVE-2021-3481430Наблюдать
Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %proofpoint · spam engine13 окт. 2021 г.
- CVE-2021-3930430Наблюдать
Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %proofpoint · enterprise protection13 окт. 2021 г.
- CVE-2024-367630Наблюдать
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an un
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %proofpoint · enterprise protection14 мая 2024 г.
- CVE-2023-480130Наблюдать
ITM MacOS Agent Improper Certificate Validation
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %proofpoint · insider threat management13 сент. 2023 г.
- CVE-2020-1065729Наблюдать
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's I
ВысокаяCVSS 7,2Эксплойта нетEPSS 3 %proofpoint · insider threat management server6 янв. 2021 г.
- CVE-2021-2789929Наблюдать
The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server
ВысокаяCVSS 7,4Эксплойта нетEPSS 1 %proofpoint · insider threat management6 апр. 2021 г.
- CVE-2021-4084329Наблюдать
Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console.
ВысокаяCVSS 7,3Эксплойта нетEPSS 0 %proofpoint · insider threat management server13 окт. 2021 г.
- CVE-2022-4633328Наблюдать
Proofpoint Enterprise Protection perl eval() arbitrary command execution
ВысокаяCVSS 7,2Эксплойта нетEPSS 2 %proofpoint · enterprise protection6 дек. 2022 г.
- CVE-2021-2215828Наблюдать
The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web
ВысокаяCVSS 7,2Эксплойта нетEPSS 1 %proofpoint · insider threat management6 апр. 2021 г.