Vendor
Proofpoint vulnerabilities
12 advisories tracked, 0 exploited in the wild according to CISA, 0 published in 2026.
Data refreshed 11 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
Nothing from Proofpoint meets this bar right now: no CVE in CISA's exploited list, and none with a high exploitation score.
Products covered
Select a product to see only its advisories.
- Email ProtectionEnterprise Protection (PPS and PoD), Email Encryption, Secure Email Relay and TAP6 tracked
- Insider Threat and DLPInsider Threat Management (formerly ObserveIT), Endpoint DLP and CASB6 tracked
- Isolation and other servicesBrowser and email isolation, Meta and the management consoles0 tracked
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2025-8558 | Insider Threat and DLP | Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass in Insider Threat Management (ITM) Server | LOW 2.3 | 0.63% | – | |
| CVE-2024-10635 | Email Protection | Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass | MEDIUM 6.1 | 0.31% | – | |
| CVE-2025-0431 | Email Protection | Enterprise Protection Backslash URL Rewrite Bypass | MEDIUM 5.8 | 0.41% | – | |
| CVE-2024-3676 | Email Protection | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation in Enterprise Protection | HIGH 7.5 | 0.36% | – | |
| CVE-2024-0862 | Email Protection | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery in Enterprise Protection | MEDIUM 5 | 0.19% | – | |
| CVE-2023-5770 | Email Protection | HTML injection in email body through email subject | MEDIUM 5.3 | 0.34% | – | |
| CVE-2023-5771 | Email Protection | HTML injection in AdminUI through email subject | MEDIUM 6.1 | 0.34% | – | |
| CVE-2023-4801 | Insider Threat and DLP | ITM MacOS Agent Improper Certificate Validation | HIGH 7.5 | 0.25% | – | |
| CVE-2023-2818 | Insider Threat and DLP | ITM Windows Agent Insecure Filesystem Permissions | MEDIUM 5.5 | 0.15% | – | |
| CVE-2023-35998 | Insider Threat and DLP | ITM Server Missing Authorization in SOAP Endpoints | MEDIUM 4.6 | 0.24% | – | |
| CVE-2023-36000 | Insider Threat and DLP | ITM Server Missing Authorization for Agent Config | MEDIUM 6.5 | 0.31% | – | |
| CVE-2023-36002 | Insider Threat and DLP | ITM Server Missing Authorization for URL validation | MEDIUM 4.3 | 0.25% | – |
Sources: Proofpoint security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.