CVE-2020-10656

9.8 criticalEPSS 2.7%

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2021-01-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

proofpoint:insider_threat_management_server

References

https://www.proofpoint.com/us/blog
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003
https://www.proofpoint.com/us/blog
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003

Check your stack JSON