CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2024-3676
https://notcve.org/view.php?id=CVE-2024-3676
14 May 2024 — The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These accounts are able to send spoofed email to any users within the domains configured by the Administrator. El endpoint de Proofpoint Encryption de Proofpoint Enterprise Protection contiene una vulnerabilidad de validación de... • https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2024-0002 • CWE-20: Improper Input Validation •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2024-0862
https://notcve.org/view.php?id=CVE-2024-0862
14 May 2024 — The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses. El endpoint de Proofpoint Encryption de Proofpoint Enterprise Protection contiene una vulnerabilidad de Server Side Request Forgery que permite a un usuario autenticado transmitir solicitudes HTTP desde el servidor de Protection a direcciones de red que de otro mo... • https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2024-0001 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 6.4EPSS: 0%CPEs: 3EXPL: 0CVE-2023-5770 – HTML injection in email body through email subject
https://notcve.org/view.php?id=CVE-2023-5770
09 Jan 2024 — Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions. Proofpoint Enterprise ... • https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0009 • CWE-838: Inappropriate Encoding for Output Context •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2021-31608
https://notcve.org/view.php?id=CVE-2021-31608
17 Nov 2022 — Proofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control. Proofpoint Enterprise Protection anterior a 18.8.0 permite omitir un control de seguridad. • https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0011 •