CVE-2024-0862

MEDIUM

Proofpoint Enterprise Protection - SSRF

Title source: llm

Description

The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.

References (1)

Core 1

Core References

Various Sources

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2024-0001

Scores

CVSS v3 5.0

EPSS 0.0019

EPSS Percentile 8.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (5)

Proofpoint/Enterprise Protection 8.18.6 - patch 4868

Proofpoint/Enterprise Protection 8.20.0 - patch 4869

Proofpoint/Enterprise Protection 8.20.2 - patch 4870

Proofpoint/Enterprise Protection 8.20.4 - patch 4871

Proofpoint/Enterprise Protection 8.21.0 - patch 4871

Published May 14, 2024

Tracked Since Feb 18, 2026