Vulnerability Details CVE-2023-5771
Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a specially crafted email with HTML in the subject which triggers XSS when viewing quarantined messages. This issue affects Proofpoint Enterprise Protection: from 8.20.0 before patch 4796, from 8.18.6 before patch 4795 and all other prior versions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.0%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2023-5771
-
cpe:2.3:a:proofpoint:enterprise_protection:-
-
cpe:2.3:a:proofpoint:enterprise_protection:8.12.0-2104190000
-
cpe:2.3:a:proofpoint:enterprise_protection:8.12.0-2106240000
-
cpe:2.3:a:proofpoint:enterprise_protection:8.12.0-2107140000
-
cpe:2.3:a:proofpoint:enterprise_protection:8.12.0-2108090000
-
cpe:2.3:a:proofpoint:enterprise_protection:8.13.16
-
cpe:2.3:a:proofpoint:enterprise_protection:8.13.22
-
cpe:2.3:a:proofpoint:enterprise_protection:8.14.0
-
cpe:2.3:a:proofpoint:enterprise_protection:8.14.2
-
cpe:2.3:a:proofpoint:enterprise_protection:8.16.6
-
cpe:2.3:a:proofpoint:enterprise_protection:8.18.0
-
cpe:2.3:a:proofpoint:enterprise_protection:8.18.4
-
cpe:2.3:a:proofpoint:enterprise_protection:8.18.6
-
cpe:2.3:a:proofpoint:enterprise_protection:8.20.0
-
cpe:2.3:a:proofpoint:enterprise_protection:8.9.22