CVE-2020-14009

2021-05-0711:33:10

mitre

www.cve.org

proofpoint

enterprise protection

email scanning

vulnerability

malicious attachment

file-blocking rules

cve-2020-14009

multipart structures

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

39.2%

JSON

Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message with a malicious attachment that bypasses scanning and file-blocking rules. The vulnerability exists because messages with certain crafted and malformed multipart structures are not properly handled.