← Database

CVE-2022-46332

CRITICAL CVSS: 9.6 Published: 2022-12-06 Modified: 2026-06-17

Description

The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below.

Affected Platforms

Proofpoint Enterprise Protection

Weakness Type

CWE-79, CWE-79

References