Insider Threat Management
Approved changes feed: RSS · Atom
cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Proofpoint (a6e799ec-33c1-574b-ba22-45b33dd0559d) |
|---|---|
| Product | Insider Threat Management (b94ea2cb-e817-5078-89e2-dd7b3f4c2fa0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4828 |
vulnerable | 2026-06-08 06:16:14.677970 |
ITM Server Communications Hijack
MEDIUM (6.4)
An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure of sensitive data events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and all such data could be altered or deleted before reaching the ITM Server. An attacker must first successfully obtain valid agent credentials and agent hostname. All versions prior to 7.14.3.69 are affected.
Published: 2023-09-13T15:16:13.903Z
Updated: 2024-09-24T19:52:35.463Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4803 |
vulnerable | 2026-06-08 06:16:14.582275 |
ITM Server Cross-site Scripting in WriteWindowTitle Endpoint
MEDIUM (4.8)
A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to 7.14.3.69 are affected.
Published: 2023-09-13T15:15:40.928Z
Updated: 2024-09-24T19:53:11.481Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4802 |
vulnerable | 2026-06-08 06:16:14.581804 |
ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint
MEDIUM (4.8)
A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to 7.14.3.69 are affected.
Published: 2023-09-13T15:15:06.042Z
Updated: 2024-09-24T19:54:46.722Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4801 |
vulnerable | 2026-06-08 06:16:14.579701 |
ITM MacOS Agent Improper Certificate Validation
HIGH (7.5)
An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used by an anonymous actor on an adjacent network to establish a man-in-the-middle position between the agent and the ITM server after the agent has registered. All versions prior to 7.14.3.69 are affected. Agents for Windows, Linux, and Cloud are unaffected.
Published: 2023-09-13T15:14:36.165Z
Updated: 2024-09-25T17:38:58.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36002 |
vulnerable | 2026-06-08 06:06:28.287506 |
ITM Server Missing Authorization for URL validation
MEDIUM (4.3)
A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected.
Published: 2023-06-27T14:32:26.673Z
Updated: 2024-11-06T21:22:15.079Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36000 |
vulnerable | 2026-06-08 06:06:28.286846 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35998 |
vulnerable | 2026-06-08 06:06:28.285064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2818 |
vulnerable | 2026-06-08 06:02:43.134839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27900 |
vulnerable | 2026-06-08 05:31:22.697023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22158 |
vulnerable | 2026-06-08 05:29:59.962401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22157 |
vulnerable | 2026-06-08 05:29:59.961994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.