Loading
Generated remediation guidance and an executive summary. No account required.
A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write unauthorized objects. Successful exploitation requires an attacker to first obtain a valid agent authentication token. All versions before 7.14.3 are affected.
Cite this page
CVE-2023-35998. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2023-35998
Use CWE-862, Proofpoint vendor hub and Insider Threat Management Server product page to widen CVE-2023-35998 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2021-40842, CVE-2020-10658 and CVE-2020-10656 for nearby disclosures in the same product family. Additional editorial context is available in Weekly Security Roundup: Navigating the April 2026 Threat Landscape and Critical Framework Exploits.