CVE-2022-46332
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%
The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| proofpoint:enterprise_protection | proofpoint enterprise protection | le | 8.19.0 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "enterprise_protection",
"vendor": "proofpoint",
"versions": [
{
"changes": [
{
"at": "8.19.0 patch 4546",
"status": "unaffected"
},
{
"at": "8.18.6 patch 4545",
"status": "unaffected"
},
{
"at": "8.18.4 patch 4544",
"status": "unaffected"
},
{
"at": "8.13.22 patch 4543",
"status": "unaffected"
}
],
"lessThanOrEqual": "8.19.0",
"status": "affected",
"version": "8.*",
"versionType": "semver"
}
]
}
]Related
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
8.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.4%