Enterprise Protection
Approved changes feed: RSS · Atom
cpe:2.3:a:proofpoint:enterprise_protection:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Proofpoint (a6e799ec-33c1-574b-ba22-45b33dd0559d) |
|---|---|
| Product | Enterprise Protection (75427279-a971-5437-b17a-3e492ac2334e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0431 |
vulnerable | 2026-06-08 07:02:24.593825 |
Enterprise Protection Backslash URL Rewrite Bypass
MEDIUM (5.8)
Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively.
Published: 2025-03-19T16:18:23.793Z
Updated: 2025-03-19T17:38:26.546Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3676 |
vulnerable | 2026-06-08 06:43:51.186940 |
Details available
HIGH (7.5)
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These accounts are able to send spoofed email to any users within the domains configured by the Administrator.
Published: 2024-05-14T19:07:19.420Z
Updated: 2024-08-01T20:19:59.948Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10635 |
vulnerable | 2026-06-08 06:23:47.142973 |
Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass
MEDIUM (6.1)
Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system.
Published: 2025-04-28T20:36:43.320Z
Updated: 2025-10-06T20:51:36.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0862 |
vulnerable | 2026-06-08 06:22:03.015613 |
Details available
MEDIUM (5)
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.
Published: 2024-05-14T19:07:04.897Z
Updated: 2024-08-20T18:43:47.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5771 |
vulnerable | 2026-06-08 06:19:44.700612 |
HTML injection in AdminUI through email subject
MEDIUM (6.1)
Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a specially crafted email with HTML in the subject which triggers XSS when viewing quarantined messages. This issue affects Proofpoint Enterprise Protection: from 8.20.0 before patch 4796, from 8.18.6 before patch 4795 and all other prior versions.
Published: 2023-11-06T20:06:28.575Z
Updated: 2024-09-04T18:55:47.857Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0090 |
vulnerable | 2026-06-08 05:52:04.261728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0089 |
vulnerable | 2026-06-08 05:52:04.259296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46334 |
vulnerable | 2026-06-08 05:50:38.652652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46333 |
vulnerable | 2026-06-08 05:50:38.652253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46332 |
vulnerable | 2026-06-08 05:50:38.651664 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39304 |
vulnerable | 2026-06-08 05:33:49.969214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31608 |
vulnerable | 2026-06-08 05:31:53.743216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.