CVE-2012-2955

published 2012-07-20

CVE-2012-2955: Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and…

Priority P4 23 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

EXPLOIT

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
ibm	lotus_protector_for_mail_security	—	—
ibm	lotus_protector_for_mail_security	—	—
ibm	lotus_protector_for_mail_security	—	—
ibm	lotus_protector_for_mail_security	—	—
ibm	proventia_network_mail_security_system	—	—
ibm	proventia_network_mail_security_system_firmware	—	—
ibm	proventia_network_mail_security_system_firmware	—	—
ibm	proventia_network_mail_security_system_firmware	—	—
ibm	proventia_network_mail_security_system_firmware	—	—
ibm	proventia_network_mail_security_system_firmware	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79