2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"enterprise_protection","vendor":"proofpoint","versions":[{"changes":[{"at":"8.20.0 patch 4570","status":"unaffected"},{"at":"8.18.6 patch 4568","status":"unaffected"},{"at":"8.18.4 patch 4567","status":"unaffected"},{"at":"8.13.22 patch 4566","status":"unaffected"}],"lessThanOrEqual":"8.20.0","status":"affected","version":"8.*","versionType":"semver"}]}],"source":"security@proofpoint.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:proofpoint:enterprise_protection:*:*:*:*:*:*:*:*","matchCriteriaId":"5F25CC84-3AA4-4B66-8206-F26C14443A13","versionEndExcluding":"8.13.22","vulnerable":true},{"criteria":"cpe:2.3:a:proofpoint:enterprise_protection:*:*:*:*:*:*:*:*","matchCriteriaId":"202B7803-2398-41E7-B88B-2D64384ADC74","versionEndExcluding":"8.18.4","versionStartIncluding":"8.18.0","vulnerable":true},{"criteria":"cpe:2.3:a:proofpoint:enterprise_protection:8.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7E481ED5-1AC8-4FEA-9169-17CDE7AB93DA","vulnerable":true},{"criteria":"cpe:2.3:a:proofpoint:enterprise_protection:8.20.0:*:*:*:*:*:*:*","matchCriteriaId":"83C899EC-C3E7-4D34-8362-DEB40F16AD09","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nThe webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'.\n\nThis affects all versions 8.20.0 and below. \n\n\n\n\n\n"}],"id":"CVE-2023-0089","lastModified":"2026-06-17T05:24:45.337","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"security@proofpoint.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-0089","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-28T16:36:27.629815Z","version":"2.0.3"}}]},"published":"2023-03-08T01:15:10.240","references":[{"source":"security@proofpoint.com","tags":["Vendor Advisory"],"url":"https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001"}],"sourceIdentifier":"security@proofpoint.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-95"}],"source":"security@proofpoint.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-94"}],"source":"nvd@nist.gov","type":"Primary"}]}
|