Lucene search

K
ProofpointInsider Threat Management Server

4 matches found

CVE
CVE
added 2021/10/13 6:15 p.m.35 views

CVE-2021-40842

Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the serv...

9.8CVSS9.7AI score0.00639EPSS
CVE
CVE
added 2021/01/06 2:15 p.m.33 views

CVE-2020-10655

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerabil...

9.8CVSS9.3AI score0.06601EPSS
CVE
CVE
added 2021/01/06 2:15 p.m.33 views

CVE-2020-10658

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteImage API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is...

9.8CVSS9.3AI score0.06601EPSS
CVE
CVE
added 2021/01/06 2:15 p.m.25 views

CVE-2020-10656

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. Th...

9.8CVSS9.3AI score0.06601EPSS