İçeriğe atla
Noroxi

Proofpoint kayıtları

proofpoint üreticisine ait 45 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%40
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

45 kayıt
  • CVE-2020-10658
    40Planlayın

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser

    KritikCVSS 9,8İstismar yokEPSS %3

    proofpoint · insider threat management server6 Oca 2021

  • CVE-2020-10655
    40Planlayın

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser

    KritikCVSS 9,8İstismar yokEPSS %3

    proofpoint · insider threat management server6 Oca 2021

  • CVE-2020-10656
    40Planlayın

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application ser

    KritikCVSS 9,8İstismar yokEPSS %3

    proofpoint · insider threat management server6 Oca 2021

  • CVE-2021-40842
    39İzleyin

    Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console.

    KritikCVSS 9,8İstismar yokEPSS %1

    proofpoint · insider threat management server13 Eki 2021

  • CVE-2023-0090
    39İzleyin

    Proofpoint Enterprise Protection webservices unauthenticated RCE

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    proofpoint · enterprise protection7 Mar 2023

  • CVE-2022-46332
    38İzleyin

    Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"

    KritikCVSS 9,6İstismar yokEPSS %1

    proofpoint · enterprise protection6 Ara 2022

  • CVE-2020-8884
    36İzleyin

    rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated u

    YüksekCVSS 8,8İstismar yokEPSS %4

    proofpoint · insider threat management6 Oca 2021

  • CVE-2019-19680
    35İzleyin

    A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 an

    YüksekCVSS 8,8İstismar yokEPSS %1

    proofpoint · enterprise protection13 Oca 2020

  • CVE-2023-0089
    35İzleyin

    Proofpoint Enterprise Protection webutils authenticated RCE

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    proofpoint · enterprise protection7 Mar 2023

  • CVE-2021-27900
    33İzleyin

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Co

    YüksekCVSS 8,1İstismar yokEPSS %2

    proofpoint · insider threat management6 Nis 2021

  • CVE-2011-1904
    31İzleyin

    An unspecified function in the web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protecti

    YüksekCVSS 7,5İstismar yokEPSS %2

    proofpoint · messaging security gateway5 May 2011

  • CVE-2011-1901
    31İzleyin

    The mail-filter web interface in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3

    YüksekCVSS 7,5İstismar yokEPSS %2

    proofpoint · messaging security gateway5 May 2011

  • CVE-2021-22159
    31İzleyin

    Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveI

    YüksekCVSS 7,8İstismar yokEPSS %0

    proofpoint · insider threat management26 Oca 2021

  • CVE-2022-25294
    31İzleyin

    Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Wi

    YüksekCVSS 7,8İstismar yokEPSS %0

    proofpoint · insider threat management10 Mar 2022

  • CVE-2022-46334
    31İzleyin

    Proofpoint Enterprise Protection Local Privilege Escalation

    YüksekCVSS 7,8İstismar yokEPSS %0

    proofpoint · enterprise protection21 Ara 2022

  • CVE-2011-1903
    30İzleyin

    SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoin

    YüksekCVSS 7,5İstismar yokEPSS %1

    proofpoint · messaging security gateway5 May 2011

  • CVE-2021-34814
    30İzleyin

    Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass.

    YüksekCVSS 7,5İstismar yokEPSS %1

    proofpoint · spam engine13 Eki 2021

  • CVE-2021-39304
    30İzleyin

    Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.

    YüksekCVSS 7,5İstismar yokEPSS %1

    proofpoint · enterprise protection13 Eki 2021

  • CVE-2024-3676
    30İzleyin

    The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an un

    YüksekCVSS 7,5İstismar yokEPSS %0

    proofpoint · enterprise protection14 May 2024

  • CVE-2023-4801
    30İzleyin

    ITM MacOS Agent Improper Certificate Validation

    YüksekCVSS 7,5İstismar yokEPSS %0

    proofpoint · insider threat management13 Eyl 2023

  • CVE-2020-10657
    29İzleyin

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's I

    YüksekCVSS 7,2İstismar yokEPSS %3

    proofpoint · insider threat management server6 Oca 2021

  • CVE-2021-27899
    29İzleyin

    The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server

    YüksekCVSS 7,4İstismar yokEPSS %1

    proofpoint · insider threat management6 Nis 2021

  • CVE-2021-40843
    29İzleyin

    Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console.

    YüksekCVSS 7,3İstismar yokEPSS %0

    proofpoint · insider threat management server13 Eki 2021

  • CVE-2022-46333
    28İzleyin

    Proofpoint Enterprise Protection perl eval() arbitrary command execution

    YüksekCVSS 7,2İstismar yokEPSS %2

    proofpoint · enterprise protection6 Ara 2022

  • CVE-2021-22158
    28İzleyin

    The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web

    YüksekCVSS 7,2İstismar yokEPSS %1

    proofpoint · insider threat management6 Nis 2021