CVE-2021-39304

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-39304

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

Security feature bypass

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

Design/Logic Flaw

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-39304

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

CVE-2021-39304

CVE-2021-39304 affects Proofpoint Enterprise Protection prior to version 8.12.0-2108090000, where a security control bypass enables bypassing protection controls. The connected Red Hat and CVE records reiterate the same description: Proofpoint Enterprise Protection before 8.12.0-2108090000 allows...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-34814

CVE-2021-34814 affects Proofpoint Spam Engine prior to 8.12.0-2106240000. The issue is a Security Control Bypass due to an access control error in the product, with impact described as HIGH availability risk (per CVSS 3.1) and no confidential/integrity impact indicated. Connected sources confirm ...

PT-2021-22975

Name of the Vulnerable Software and Affected Versions Proofpoint Insider Threat Management Server versions prior to 7.11.2 Proofpoint Insider Threat Management Server version 7.12.0 Description The issue is related to a SQL injection vulnerability in the Web Console of the Proofpoint Insider Thre...

Proofpoint Insider Threat Management Server SQL injection vulnerability

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. that is used to prevent malicious operations by enterprise insiders. A security vulnerability exists in Proofpoint Insider Threat Management Server that stems from incorrect input validation of the...

PT-2021-22976

Name of the Vulnerable Software and Affected Versions Proofpoint Insider Threat Management Server versions prior to 7.11.2 Description The issue is related to an unsafe deserialization vulnerability in the Web Console of the Proofpoint Insider Threat Management Server. An attacker with write acce...

Proofpoint Spam Engine Access Control Vulnerability

Proofpoint Spam Engine is an email filter from Proofpoint USA, Inc. It is used to filter inbound and outbound email traffic for service filtering organizations. An Access Control Error vulnerability exists in Proofpoint Spam Engine, which stems from the product allowing .dat files to be sent via...

PT-2021-22513

Name of the Vulnerable Software and Affected Versions Proofpoint Enterprise Protection versions prior to 8.12.0-2108090000 Description The issue allows security control bypass. Recommendations For versions prior to 8.12.0-2108090000, update to version 8.12.0-2108090000 or later to resolve the iss...

CVE-2021-40843: Deserialization of Untrusted Data

Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker with write access to the local database could cause arbitrary code to execute with SYSTEM privileges on the underlying server when a Web Console user triggers retrieval of...

CVE-2021-39304: Undefined Security Weakness

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass...

Proofpoint Insider Threat Management Server code-related vulnerabilities

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. that is used to prevent malicious operations by enterprise insiders. A security vulnerability exists in Proofpoint Insider Threat Management Server that stems from Proofpoint Insider Threat Management...

CVE-2021-34814: Undefined Security Weakness

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

PT-2021-20667

Name of the Vulnerable Software and Affected Versions: Proofpoint Spam Engine versions prior to 8.12.0-2106240000 Description: The issue is related to a Security Control Bypass in the Proofpoint Spam Engine. Recommendations: For versions prior to 8.12.0-2106240000, update to version...

Proofpoint Enterprise Protection code-related vulnerabilities

Proofpoint Enterprise Protection is an application from Proofpoint USA. that provides functionality to protect email. A code issue vulnerability exists in Proofpoint Enterprise Protection that stems from the product allowing cascading style sheets to be implemented incorrectly. An attacker could...