CVE-2025-0431
Medium
Description
Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively.
SeverityMedium
CVSS5.8
Exploit probability—
ProductEnterprise Protection
PublishedMar 19, 2025
First seenMar 19, 2025
Weakness typeCWE-790CWE-790
How to fix
Update
- Proofpoint Enterprise Protectionpatch 5113, patch 5114, patch 5115 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Proofpoint Enterprise Protection | 8.18.6 ≤ v < patch 5113, 8.20.6 ≤ v < patch 5114, 8.21.0 ≤ v < patch 5115 | patch 5113, patch 5114, patch 5115 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.