CVE-2025-8558 - CVE House
Back to Database
Status published Low CVE-2025-8558

Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication...

Vulnerability Description

Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform agent unregistration when the number of registered agents exceeds the licensed limit. Successful exploitation prevents the server from receiving new events from affected agents, resulting in a partial loss of integrity and availability with no impact to confidentiality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8558

Credits & Attribution

No credits recorded in the NVD database.

References

More from Proofpoint

View All →
CVE-2025-0431
Enterprise Protection Backslash URL Rewrite Bypass
Medium 5.8
CVE-2024-3676
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an...
High 7.5
CVE-2024-10635
Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass
Medium 6.1
CVE-2024-0862
The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a...
Medium 5
CVE-2023-5771
HTML injection in AdminUI through email subject
Medium 6.1

Affected Vendor

Affected Software

Insider Threat Management (ITM) Server
Vulnerable Versions:
0

Timeline

Official Publish: November 3rd, 2025
Last Modified: November 3rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1136 Create Account
Persistence
T1098 Account Manipulation
Privilege Escalation
T1021 Remote Services
Lateral Movement