Skip to content

Product

proofpoint ITM Server vulnerabilities

3 published CVES affecting proofpoint ITM Server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest proofpoint ITM Server CVEs

Newest publication first

  1. CVE-2023-4828 ITM Server Communications Hijack

    Published
    MediumCVSS 4.2 EPSS 0.36%

    An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could r...

  2. CVE-2023-4803 ITM Server Cross-site Scripting in WriteWindowTitle Endpoint

    Published
    MediumCVSS 4.8 EPSS 0.35%

    A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions...

  3. CVE-2023-4802 ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint

    Published
    MediumCVSS 4.8 EPSS 0.35%

    A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All v...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.