CVE-2025-0431 - CVE House
Back to Database
Status published Medium CVE-2025-0431

Enterprise Protection Backslash URL Rewrite Bypass

Vulnerability Description

Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0431

Credits & Attribution

No credits recorded in the NVD database.

References

More from Proofpoint

View All →
CVE-2025-8558
Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication...
Low 2.3
CVE-2024-3676
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an...
High 7.5
CVE-2024-10635
Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass
Medium 6.1
CVE-2024-0862
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a...
Medium 5
CVE-2023-5771
HTML injection in AdminUI through email subject
Medium 6.1

Affected Vendor

Affected Software

Enterprise Protection
Vulnerable Versions:
8.18.6, 8.20.6, 8.21.0

Timeline

Official Publish: March 19th, 2025
Last Modified: March 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Weaknesses (CWE)

CWE-790

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.