CVE-2019-20634 affects Proofpoint Email Protection, allowing attackers to reverse-engineer its email classification model. By analyzing email header scores, an attacker can craft malicious emails designed to bypass filters and achieve delivery. This vulnerability has a low CVSS score of 3.7 due to its high attack complexity and limited impact (information disclosure), with no known active exploitation, publicly available exploit code, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2019-09-08CPE matchmatch criteria | cpe:2.3:a:proofpoint:email_protection:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.