Security
Security Advisories

Security Advisories

Stay up-to-date with our latest security advisories

Reference this page to stay informed about important security vulnerabilities that could affect specific versions of Proofpoint products or services.

Proofpoint Threat Response / Threat Response Auto Pull (PTR/TRAP) Cross Site Scripting in Sources UI

CVE-2023-2819 | CVSS 4.3 (Medium)

Type: Security Advisory
Read more
Proofpoint Enterprise Protection multiple perl eval vulnerabilities

CVE-2023-0089 | CVSS 8.8 (High), CVE-2023-0090 | CVSS 8.1 (High)

Type: Security Advisory
Read more
Proofpoint Enterprise Local Protection Privilege Escalation

CVE-2022-46334 | CVSS 6.7 (Medium)

Type: Security Advisory
Read more
Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"

CVE-2022-46332 | CVSS 9.6 (Critical)

Type: Security Advisory
Read more
Proofpoint Enterprise Protection (PPS/PoD) perl eval() arbitrary command execution

CVE-2022-46333 | CVSS 7.2 (High)

Type: Security Advisory
Read more
ITM Windows Agent Local Privilege Escalation

CVE-2022-25294 | CVSS 7.8 (High)

Type: Security Advisory
Read more
Proofpoint Email Protection URL Rewrite Bypass via Invalid URL Scheme

CVE-2021-31608 | CVSS 7.4 (High)

Type: Security Advisory
Read more
Essentials Filter Bypass with .eml or .msg File Attachments

CVSS 7.5 (High)

Type: Security Advisory
Read more
Customers Email message containing badly formatted CSS causes Denial of Service in Spam Engine

CVE-2021-39304 | CVSS 6.7 (Medium)

Type: Security Advisory
Read more
ITM Server Unsafe Deserialization of Data retrieved from DB

CVE-2021-40843 | CVSS 8.8 (High)

Type: Security Advisory
Read more