Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the server could be used to blindly execute arbitrary SQL statements on the backend database. Version 7.12.0 and all versions prior to 7.11.2 are affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Proofpoint Insider Threat Management Server SQL注入漏洞
Vulnerability Description
Proofpoint Insider Threat Management Server是美国Proofpoint公司的一款应用于防止企业内部人员恶意操作的服务端应用。 Proofpoint Insider Threat Management Server 存在安全漏洞，该漏洞源于某些未经身份验证的api所需的数据库名称参数的输入验证不正确。攻击者可利用该漏洞在后端数据库上执行任意SQL语句。
CVSS Information
N/A
Vulnerability Type
N/A