Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

proofpoint — Vulnerabilities & Security Advisories 22

Browse all 22 CVE security advisories affecting proofpoint. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Proofpoint operates primarily as a cloud-based cybersecurity provider specializing in email security, threat intelligence, and data loss prevention for enterprise organizations. Its software suite processes vast amounts of inbound and outbound communications to detect malicious content and prevent sophisticated phishing attacks. Historically, vulnerabilities within its infrastructure have frequently involved remote code execution (RCE) and cross-site scripting (XSS), often stemming from web interface flaws or insecure API implementations. These weaknesses have occasionally allowed attackers to bypass authentication or escalate privileges, compromising sensitive customer data. While the company maintains robust security protocols, past incidents highlight the risks associated with complex cloud architectures. The current record of twenty-two Common Vulnerabilities and Exposures underscores the ongoing challenge of securing large-scale, internet-facing services against evolving threat vectors.

CVE ID Title CVSS Severity Published
CVE-2025-8558 Proofpoint Insider Threat Management Server 安全漏洞 — Insider Threat Management (ITM) Server CWE-306 6.3AI Medium AI 2025-11-03
CVE-2024-10635 Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass — Enterprise Protection CWE-754 6.1 Medium 2025-04-28
CVE-2025-0431 Enterprise Protection Backslash URL Rewrite Bypass — Enterprise Protection CWE-790 5.8 Medium 2025-03-19
CVE-2024-3676 Proofpoint Enterprise Protection 输入验证错误漏洞 — Enterprise Protection CWE-20 7.5 High 2024-05-14
CVE-2024-0862 Proofpoint Enterprise Protection 代码问题漏洞 — Enterprise Protection CWE-918 5.0 Medium 2024-05-14
CVE-2023-5770 HTML injection in email body through email subject — Proofpoint Enterprise Protection CWE-838 5.3 Medium 2024-01-09
CVE-2023-5771 HTML injection in AdminUI through email subject — Proofpoint Enterprise Protection CWE-79 6.1 Medium 2023-11-06
CVE-2023-4828 ITM Server Communications Hijack — ITM Server CWE-754 6.4 Medium 2023-09-13
CVE-2023-4803 ITM Server Cross-site Scripting in WriteWindowTitle Endpoint — ITM Server CWE-79 4.8 Medium 2023-09-13
CVE-2023-4802 ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint — ITM Server CWE-79 4.8 Medium 2023-09-13
CVE-2023-4801 ITM MacOS Agent Improper Certificate Validation — Insider Threat Management CWE-295 7.5 High 2023-09-13
CVE-2023-36002 ITM Server Missing Authorization for URL validation — Insider Threat Management CWE-862 4.3 Medium 2023-06-27
CVE-2023-36000 ITM Server Missing Authorization for Agent Config — Insider Threat Management CWE-862 6.5 Medium 2023-06-27
CVE-2023-35998 ITM Server Missing Authorization in SOAP Endpoints — Insider Threat Management CWE-862 4.6 Medium 2023-06-27
CVE-2023-2818 ITM Windows Agent Insecure Filesystem Permissions — Insider Threat Management CWE-281 5.5 Medium 2023-06-27
CVE-2023-2820 Proofpoint Threat Response 信息泄露漏洞 — Threat Response Auto Pull CWE-200 6.1 Medium 2023-06-14
CVE-2023-2819 Proofpoint Threat Response 跨站脚本漏洞 — Threat Response Auto Pull CWE-79 4.3 Medium 2023-06-14
CVE-2023-0090 Proofpoint Enterprise Protection webservices unauthenticated RCE — enterprise_protection CWE-95 9.8 Critical 2023-03-08
CVE-2023-0089 Proofpoint Enterprise Protection webutils authenticated RCE — enterprise_protection CWE-95 8.8 High 2023-03-08
CVE-2022-46334 Proofpoint Enterprise Protection Local Privilege Escalation — enterprise_protection CWE-269 7.8 High 2022-12-21
CVE-2022-46333 Proofpoint Enterprise Protection perl eval() arbitrary command execution — enterprise_protection CWE-94 7.2 High 2022-12-06
CVE-2022-46332 Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names" — enterprise_protection CWE-79 9.6 Critical 2022-12-06

This page lists every published CVE security advisory associated with proofpoint. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.