CVE-2023-2818

5.5 mediumEPSS 0.2%

Medium (5.5) in proofpoint insider threat management. EPSS 0.2% chance of exploitation in the next 30 days.

An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-281
Published: 2023-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

proofpoint:insider_threat_management

References

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005
https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005

Check your stack JSON