cve.bz

CVE-2023-35998

4.6 mediumEPSS 0.2%

Medium (4.6) in proofpoint insider threat management server. EPSS 0.2% chance of exploitation in the next 30 days.

A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.

Severity

CVSS 3.1

4.6 medium
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE
CWE-862
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON