CVE-2023-4802

—

CVSS 3.1

4.8 medium

EPSS

<1%p22

Published

Sep 13, 2023 (Sep 13, 2023)

Modified

Jun 17, 2026

Description

A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to 7.14.3.69 are affected.

Vendors: proofpoint
Products: insider threat management
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.