Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Proofpoint Component: Threat Response Auto Pull Clear all filters
TI-2023-02642 CVE-2023-2820 · GHSA-92ch-fw3f-gxmq

Information disclosure in Proofpoint Threat Response Auto Pull

Priority LOW 30

An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent network to obtain credentials to integrated se…

CVSS 3.1MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.0025 Published 2023-06-14 Fixed in 5.10.0 CWE-200
TI-2023-02641 CVE-2023-2819 · GHSA-4354-g78v-qrv4

Cross-site scripting in Proofpoint Threat Response Auto Pull

Priority LOW 20

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image fil…

CVSS 3.1MEDIUM 4.3 Adjacent network High privileges User interaction EPSS 0.00256 Published 2023-06-14 Fixed in 5.10.0 CWE-79