Email Protection
CVE-2024-0862: The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery in Enterprise Protection
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Enterprise Protection 8.18 | patch 4868 or later |
| Enterprise Protection 8.20 | patch 4869 or later |
| Enterprise Protection 8.20 | patch 4870 or later |
| Enterprise Protection 8.20 | patch 4871 or later |
| Enterprise Protection 8.21 | patch 4872 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an authenticated user to relay HTTP requests from the Protection server to otherwise private network addresses.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.