CVE-2021-27900

8.1 highEPSS 2.5%

High (8.1) in proofpoint insider threat management. EPSS 2.5% chance of exploitation in the next 30 days.

The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Console. This enables a view-only user to change any configuration setting and delete any registered agents. All versions before 7.11.1 are affected.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2021-04-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

proofpoint:insider_threat_management

References

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0005
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0005

Check your stack JSON