CVE-2022-46332: The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous…

PriorityP341critical9.6CVSS 3.1

AVNACLPRNUIRSCCHIHAH

EPSS

0.61%

44.8th percentile

The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
proofpoint	enterprise_protection	<= 8.19.0	—
proofpoint	enterprise_protection	8.* – 8.19.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.