8.18.4

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-06	CVE-2023-5771	Cross-site Scripting vulnerability in Proofpoint Enterprise Protection Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. network low complexity proofpoint CWE-79	6.1
2022-12-21	CVE-2022-46334	Improper Privilege Management vulnerability in Proofpoint Enterprise Protection Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. local low complexity proofpoint CWE-269	7.8
2022-12-06	CVE-2022-46332	Cross-site Scripting vulnerability in Proofpoint Enterprise Protection The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. network low complexity proofpoint CWE-79 critical	9.6
2022-12-06	CVE-2022-46333	Code Injection vulnerability in Proofpoint Enterprise Protection The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. network low complexity proofpoint CWE-94	7.2