CVE-2021-22157: Proofpoint Insider Threat Management

Medium severity, CVSS 6.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows stored XSS.

Affected products

• Proofpoint Insider Threat Management: from 7.9.0, before 7.9.3 (fixed in 7.9.3); from 7.10.0, before 7.10.3 (fixed in 7.10.3); from 7.11.0, before 7.11.1 (fixed in 7.11.1)

Published 2021-04-06. Last modified 2026-06-17.