Cross site scripting

2022-12-0620:15:00

PRIOn knowledge base

www.prio-n.com

admin smart search

proofpoint enterprise protection

cross-site scripting

vulnerability

admin privileges

user interface

nvd

versions 8.19.0

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below.

CPENameOperatorVersion
enterprise_protectionle8.19.0

CPE	Name	Operator	Version
	enterprise_protection	le	8.19.0

References

www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0002