CVE-2021-22158

7.2 highEPSS 0.6%

High (7.2) in proofpoint insider threat management. EPSS 0.6% chance of exploitation in the next 30 days.

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web Console. The vulnerability requires admin user privileges and knowledge of the XML file's encryption key to successfully exploit. All versions before 7.11 are affected.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2021-04-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

proofpoint:insider_threat_management

References

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0003
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0003

Check your stack JSON