proofpoint insider threat management server vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network...

Proofpoint Insider Threat Management Server Proofpoint Insider Threat Management Server 7.12.0

NA

A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an malicious user to first obtain a valid agent authentication toke...

Proofpoint Insider Threat Management Server

NA

A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions prior to 7.14.3 are affected.

Proofpoint Insider Threat Management Server

7.5

CVSSv2

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote malicious user to execute arbitrary code with local administ...

Proofpoint Insider Threat Management Server

7.5

CVSSv2

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote malicious user to execute arbitrary code with lo...

Proofpoint Insider Threat Management Server

6.9

CVSSv2

Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker with write access to the local database could cause arbitrary code to execute with SYSTEM privileges on the underlying server when a Web Console user trigg...

Proofpoint Insider Threat Management Server

6.5

CVSSv2

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature. The vulnerability allows a remote attacker (with admin or config-admin privileges in the console) to execute...

Proofpoint Insider Threat Management Server

7.5

CVSSv2

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to 7.9.1 contains a vulnerability in the ITM application server's WriteImage API. The vulnerability allows an anonymous remote malicious user to execute arbitrary code with local administrator ...

Proofpoint Insider Threat Management Server

4.3

CVSSv2

Proofpoint Insider Threat Management Server (formerly ObserveIT Server) prior to 7.11.1 allows stored XSS.

Proofpoint Insider Threat Management

5.5

CVSSv2

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Console. This enables a view-only user to change any configuration setting and delete any registered agents. All versions prior to 7.11.1 are ...

Proofpoint Insider Threat Management

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook