Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents the server from receiving new events from affected agents, resulting in a partial loss of integrity and availability with no impact to confidentiality.

Last Modified: Nov 07, 2025

Published: Nov 03, 2025

CVE-2024-10635

Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass

Last Modified: Oct 06, 2025

Published: Apr 28, 2025

CVE-2025-0431

Enterprise Protection Backslash URL Rewrite Bypass

Last Modified: Apr 15, 2026

Published: Mar 19, 2025

CVE-2024-3676

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control. These accounts are able to send spoofed email to any users within the domains configured by the Administrator.

Last Modified: Apr 15, 2026

Published: May 14, 2024

CVE-2024-0862

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.

Last Modified: Apr 15, 2026

Published: May 14, 2024

Items Per Page