Server-side request forgery in Proofpoint Enterprise Protection
Priority LOW 22CWE-918Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.
Summary
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00192 8th percentileScored 2026-11-07
Fix Fixed Enterprise Protection (Proofpoint): patch 4868, patch 4869, patch 4870 +1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Proofpoint | Enterprise Protection | 8.18.6 to before patch 4868; 8.20.0 to before patch 4869; 8.20.2 to before patch 4870; 8.20.4 to before patch 4871; 8.21.0 to before patch 4871 | patch 4868, patch 4869, patch 4870, patch 4871 | Patch available | CNA |
- Enterprise Protection VendorProofpoint Affected 8.18.6 to before patch 4868; 8.20.0 to before patch 4869; 8.20.2 to before patch 4870; 8.20.4 to before patch 4871; 8.21.0 to before patch 4871 Fixed in patch 4868, patch 4869, patch 4870, patch 4871 Patch available CNA
Remediation
- Fix · CNA Enterprise Protection (Proofpoint) Fixed in patch 4868, patch 4869, patch 4870, patch 4871
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Proofpoint Enterprise Protection patch 4868, patch 4869 and 2 more versions
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-03430 Improper input validation in Proofpoint Enterprise ProtectionPriority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2024-0862
- 2026-10-03 Alias added: GHSA-hw37-xg77-53hx
More Proofpoint vulnerabilities
- TI-2020-08565 The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1… CVSS 3.1CRITICAL 9.8
- TI-2020-08563 The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1… CVSS 3.1CRITICAL 9.8
- TI-2020-08562 The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1… CVSS 3.1CRITICAL 9.8
- TI-2020-07138 rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT… CVSS 3.1HIGH 8.8
- TI-2023-00086 Proofpoint Enterprise Protection webservices unauthenticated RCE CVSS 3.1CRITICAL 9.8
- TI-2021-17766 Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-0862 · CVE Program
- CVE-2024-0862 · NVD
- FIRST EPSS
- GHSA-hw37-xg77-53hx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences