CVE-2020-14009

Published: May 7, 2021Modified: Jun 17, 2026

6.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: NVD

Description

Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message with a malicious attachment that bypasses scanning and file-blocking rules. The vulnerability exists because messages with certain crafted and malformed multipart structures are not properly handled.

Affected (2)

Products: Proofpoint: Enterprise Protection

1 product

Enterprise Protection

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Proofpoint Enterprise Protection	Before 8.13.16
Proofpoint Enterprise Protection	From 8.14.0 to 8.16.4

Related CWEs

Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References (4)

https://www.proofpoint.com/us/security/security-advisories

Source: cve@mitre.org

Vendor Advisory

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0006

Source: cve@mitre.org

Vendor Advisory

https://www.proofpoint.com/us/security/security-advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0006

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.