CVE-2023-5771

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Nov 6, 2023
Updated: Nov 14, 2023
CWE ID 79

Summary

CVE-2023-5771 is a stored XSS vulnerability in Proofpoint Enterprise Protection's AdminUI, which allows an unauthenticated attacker to trigger cross-site scripting (XSS) by sending a specially crafted email with HTML in the subject. This vulnerability affects Proofpoint Enterprise Protection versions 8.20.0 (before patch 4796), 8.18.6 (before patch 4795), and all prior versions. The risk score for this vulnerability is 26, with a base severity of medium and a base score of 6.1 according to CVSS:3.1. The potential danger posed to an organization includes the unauthorized execution of malicious scripts within the application, potentially leading to data theft or manipulation. To remediate this vulnerability, organizations should apply the appropriate patches provided by Proofpoint as soon as possible.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5771 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options