CVE-2022-46333

CVSS 7.2v3.1pub. 2022-12-06upd. 2024-11-21

The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Proofpoint Enterprise Protection
APP
Proofpoint
≤ 8.19.0

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

CWE-94

References

www.proofpoint.com/security/security-advisories/pfpt-sa…

Related vulnerabilities

CVE-2023-0090CRITICAL9.8ten sam produkt

The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anony...

CVE-2022-46332CRITICAL9.6ten sam produkt

The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scri...

CVE-2023-0089HIGH8.8ten sam produkt

The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticat...

CVE-2022-46334HIGH7.8ten sam produkt

Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to r...

CVE-2021-39304HIGH7.5ten sam produkt

Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.