| Package | Affected versions | Patched versions |
|---|---|---|
| enterprise protection | = 8.18.6= 8.20.0≥ 8.18.0, < 8.18.4< 8.13.22 | 8.18.48.13.22 |
The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-standard configuration. This affects all versions 8.20.0 and below.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free