CVE Feed

    Dashboard / CVE / CVE-2025-8558

    CVE-2025-8558

    Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents the server from receiving new events from affected agents, resulting in a partial loss of integrity and availability with no impact to confidentiality.

    Published:Nov 3, 2025
    Last Modified:Nov 7, 2025
    EPS:Nov 3, 2025
    EPSS Score:0.00046
    CVSS Score:5.4

    Affected Products

    Vendor
    Proofpoint
    Product
    Insider Threat Management Server

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-4828 (CVSS 6.4) — An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by …
    CVE-2023-36002 (CVSS 4.3) — A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server ena…
    CVE-2023-36000 (CVSS 6.5) — A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Serve…
    CVE-2023-35998 (CVSS 4.6) — A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an at…
    CVE-2021-40842 (CVSS 9.8) — Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vul…
    CVE-2021-40843 (CVSS 7.3) — Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Consol…
    CVE-2020-10658 (CVSS 9.8) — The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerabil…
    CVE-2020-10657 (CVSS 7.2) — The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerabil…
    CVE-2020-10656 (CVSS 9.8) — The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerabil…
    CVE-2020-10655 (CVSS 9.8) — The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerabil…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High