What’s Vulnerable › Vulnerabilities

CVE-2011-1903

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-05-05 · updated 2026-06-16
• Weakness: CWE-89

Description

SQL injection vulnerability in an unspecified function in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Affected products

• Proofpoint Messaging Security Gateway: through 6.2.0.263\:6.2.0.237
• Proofpoint Protection Server: 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, 6.2.0

References

• http://www.clearskies.net/documents/css-advisory-css1105-proofpoint.php
• http://www.kb.cert.org/vuls/id/790980
• https://support.proofpoint.com/article.cgi?article_id=338413
• http://www.clearskies.net/documents/css-advisory-css1105-proofpoint.php
• http://www.kb.cert.org/vuls/id/790980
• https://support.proofpoint.com/article.cgi?article_id=338413

Get alerted when CVE-2011-1903 or the next vulnerability affects your stack