What’s Vulnerable › Vulnerabilities

CVE-2011-1905

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-05-05 · updated 2026-06-16
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified administrative modules in Proofpoint Messaging Security Gateway 6.2.0.263:6.2.0.237 and earlier in Proofpoint Protection Server 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, and 6.2.0 allow remote attackers to hijack the authentication of administrators via unknown vectors.

Affected products

• Proofpoint Messaging Security Gateway: through 6.2.0.263\:6.2.0.237
• Proofpoint Protection Server: 5.5.3, 5.5.4, 5.5.5, 6.0.2, 6.1.1, 6.2.0

References

• http://www.clearskies.net/documents/css-advisory-css1105-proofpoint.php
• http://www.kb.cert.org/vuls/id/790980
• https://support.proofpoint.com/article.cgi?article_id=338413
• http://www.clearskies.net/documents/css-advisory-css1105-proofpoint.php
• http://www.kb.cert.org/vuls/id/790980
• https://support.proofpoint.com/article.cgi?article_id=338413

Get alerted when CVE-2011-1905 or the next vulnerability affects your stack