CVE-2022-46332

🗓️ 06 Dec 2022 19:52:02Reported by ProofpointType

cve🔗 web.nvd.nist.gov👁 91 Views🌐 WEB

Stored XSS vulnerability in Proofpoint Enterprise Protection

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-46332	6 Dec 202222:49	–	circl
CNNVD	Proofpoint Enterprise Protection 跨站脚本漏洞	6 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-46332 Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"	6 Dec 202219:52	–	cvelist
GithubExploit	Exploit for Cross-site Scripting in Proofpoint Enterprise_Protection	7 Jul 202612:57	–	githubexploit
EUVD	EUVD-2022-49149	3 Oct 202520:07	–	euvd
NVD	CVE-2022-46332	6 Dec 202220:15	–	nvd
OSV	CVE-2022-46332	6 Dec 202220:15	–	osv
Prion	Cross site scripting	6 Dec 202220:15	–	prion
Positive Technologies	PT-2022-27824 · Proofpoint · Proofpoint Enterprise Protection	6 Dec 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-46332 Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"	6 Dec 202219:52	–	vulnrichment

NVD

Node

proofpoint enterprise_protectionRange≤8.19.0

[
  {
    "defaultStatus": "unaffected",
    "product": "enterprise_protection",
    "vendor": "proofpoint",
    "versions": [
      {
        "changes": [
          {
            "at": "8.19.0 patch 4546",
            "status": "unaffected"
          },
          {
            "at": "8.18.6 patch 4545",
            "status": "unaffected"
          },
          {
            "at": "8.18.4 patch 4544",
            "status": "unaffected"
          },
          {
            "at": "8.13.22 patch 4543",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "8.19.0",
        "status": "affected",
        "version": "8.*",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
proofpoint	www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0002

Parameter	Position	Path	Description	CWE
euwebcustomloginurl	request body	/admin	POST to /admin injects malicious login/logout URLs and tokens to enable remote code execution chain.	CWE-79
euwebcustomlogouturl	request body	/admin	POST to /admin injects malicious login/logout URLs and tokens to enable remote code execution chain.	CWE-79
pps_magic	request body	/admin	POST to /admin injects malicious login/logout URLs and tokens to enable remote code execution chain.	CWE-79
pps_token	request body	/admin	POST to /admin injects malicious login/logout URLs and tokens to enable remote code execution chain.	CWE-79

17 Jun 2026 05:11Current

8.9High risk

Vulners AI Score8.9

CVSS 3.19.6

EPSS0.00612

SSVC

CWE-79