Proofpoint Enterprise Protection webservices unauthenticated RCE

CVE-2023-0090

What is CVE-2023-0090?

The webservices in Proofpoint Enterprise Protection (PPS/POD) are susceptible to a vulnerability that enables unauthorized users to execute remote code through 'eval injection'. Exploitation of this vulnerability necessitates network access to the webservices API; however, such access is typically considered a non-standard configuration. This affects all versions of the product up to and including 8.20.0.

References