High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-03-08	CVE-2023-0089	Code Injection vulnerability in Proofpoint Enterprise Protection The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below. network low complexity proofpoint CWE-94	8.8
2022-12-21	CVE-2022-46334	Improper Privilege Management vulnerability in Proofpoint Enterprise Protection Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. local low complexity proofpoint CWE-269	7.8
2022-12-06	CVE-2022-46333	Code Injection vulnerability in Proofpoint Enterprise Protection The admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. network low complexity proofpoint CWE-94	7.2