CVE-2012-2955 Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security S...
MediumCVSS 4.3
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm proventia network mail security system firmware | = 2.5 | No fix listed |
| ibm proventia network mail security system firmware | = 2.5.0.2 | No fix listed |
| ibm proventia network mail security system firmware | = 2.5.1 | No fix listed |
| ibm proventia network mail security system firmware | = 2.6 | No fix listed |
| ibm proventia network mail security system firmware | = 2.8 | No fix listed |
| ibm proventia network mail security system | All versions | No fix listed |
| ibm proventia network mail security system | = ms3004 | No fix listed |
| ibm lotus protector for mail security | = 2.1 | No fix listed |
| ibm lotus protector for mail security | = 2.5 | No fix listed |
| ibm lotus protector for mail security | = 2.5.1 | No fix listed |
| ibm lotus protector for mail security | = 2.8 | No fix listed |
References
- 84014 vdb-entry
- 49897 third-party-advisory
- www-01.ibm.com
- VU#659791 third-party-advisory us-government-resource
- 54486 vdb-entry
- lotus-protector-xss(76798) vdb-entry