CVE-2022-46333

Proofpoint Enterprise Protection perl eval() arbitrary command execution

CVSS 7.2 HIGHEPSS 1.5%CWE-94

The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

proofpoint · enterprise_protection

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.proofpoint.com/security/security-advisories/pfpt-sa-2022-0003