CRITICAL🇬🇧 English

CVE-2022-46332

CVSS 9.6v3.1pub. 2022-12-06upd. 2024-11-21

The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Proofpoint Enterprise Protection
APP
Proofpoint
≤ 8.19.0

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

Tagi

XSS

CWE

CWE-79

Referencje

www.proofpoint.com/security/security-advisories/pfpt-sa…

Powiązane podatności

CVE-2023-0090CRITICAL9.8ten sam produkt

The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anony...

CVE-2023-0089HIGH8.8ten sam produkt

The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticat...

CVE-2022-46334HIGH7.8ten sam produkt

Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to r...

CVE-2022-46333HIGH7.2ten sam produkt

The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerabil...

CVE-2021-39304HIGH7.5ten sam produkt

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.