| Package | Affected versions | Patched versions |
|---|---|---|
| enterprise protection | = 8.18.6= 8.20.0= 8.20.2 |
Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free