CVE-2023-5770
CVE-2023-5770 is a medium-severity vulnerability in Proofpoint Enterprise Protection with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-838.
Key facts
- Severity: Medium (CVSS 3.x base score 5.3)
- EPSS exploit prediction: 0% (26th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2023-58053
- Weakness: CWE-838
- Affected product: Proofpoint Enterprise Protection
- Published:
- Last modified:
Description
Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.
Frequently asked questions
- What is CVE-2023-5770?
- Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject. The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.
- How severe is CVE-2023-5770?
- CVE-2023-5770 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability none.
- Is CVE-2023-5770 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-5770?
- CVE-2023-5770 primarily affects Proofpoint Enterprise Protection. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2023-5770?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2023-5770 have an EU (EUVD) identifier?
- Yes. CVE-2023-5770 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-58053.
- When was CVE-2023-5770 published?
- CVE-2023-5770 was published on 2024-01-09 and last updated on 2026-06-17.
References
Affected products (3)
- cpe:2.3:a:proofpoint:enterprise_protection:8.18.6:*:*:*:*:*:*:*
- cpe:2.3:a:proofpoint:enterprise_protection:8.20.0:*:*:*:*:*:*:*
- cpe:2.3:a:proofpoint:enterprise_protection:8.20.2:*:*:*:*:*:*:*
More vulnerabilities in Proofpoint Enterprise Protection
- CVE-2023-0090 — Critical (CVSS 9.8): The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user…
- CVE-2022-46332 — Critical (CVSS 9.6): The Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting…
- CVE-2023-0089 — High (CVSS 8.8): The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to…
- CVE-2019-19680 — High (CVSS 8.8): A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of…
- CVE-2022-46334 — High (CVSS 7.8): Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root…
- CVE-2021-39304 — High (CVSS 7.5): Proofpoint Enterprise Protection before 8.12.0-2108090000 allows security control bypass.
All CVEs affecting Proofpoint Enterprise Protection →
Other CWE-838 vulnerabilities
- CVE-2025-4052 — Critical (CVSS 9.8): Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who…
- CVE-2019-18981 — Critical (CVSS 9.8): Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a…
- CVE-2018-9862 — High (CVSS 7.8): util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by…
- CVE-2024-11702 — High (CVSS 7.5): Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored…
- CVE-2019-6110 — Medium (CVSS 6.8): In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or…
- CVE-2023-6512 — Medium (CVSS 6.5): Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to…