Approved changes feed: RSS · Atom

cpe:2.3:a:proofpoint:enterprise_protection:8.20.0:*:*:*:*:*:*:*

part: a version: 8.20.0 update: *

VendorProofpoint (a6e799ec-33c1-574b-ba22-45b33dd0559d)
ProductEnterprise Protection (75427279-a971-5437-b17a-3e492ac2334e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5770 vulnerable 2026-06-08 06:19:44.698185 HTML injection in email body through email subject
MEDIUM (5.3)
Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.
Published: 2024-01-09T22:02:03.839Z
Updated: 2025-06-03T14:29:46.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0090 vulnerable 2026-06-08 05:52:04.261796 Proofpoint Enterprise Protection webservices unauthenticated RCE
CRITICAL (9.8)
The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-standard configuration. This affects all versions 8.20.0 and below.
Published: 2023-03-08T00:27:36.914Z
Updated: 2025-02-28T18:28:42.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0089 vulnerable 2026-06-08 05:52:04.261274 Proofpoint Enterprise Protection webutils authenticated RCE
HIGH (8.8)
The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below.
Published: 2023-03-08T00:27:25.544Z
Updated: 2025-02-28T16:36:53.420Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.