CVE-2012-2955

EUVD-2012-2933
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
ibmproventia_network_mail_security_system_firmware
2.5
ibmproventia_network_mail_security_system_firmware
2.5.0.2
ibmproventia_network_mail_security_system_firmware
2.5.1
ibmproventia_network_mail_security_system_firmware
2.6
ibmproventia_network_mail_security_system_firmware
2.8
ibmproventia_network_mail_security_system
*
ibmlotus_protector_for_mail_security
2.1
ibmlotus_protector_for_mail_security
2.5
ibmlotus_protector_for_mail_security
2.5.1
ibmlotus_protector_for_mail_security
2.8
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/84014
http://secunia.com/advisories/49897
http://www-01.ibm.com/support/docview.wss?uid=swg21605626
http://www.kb.cert.org/vuls/id/659791
http://www.securityfocus.com/bid/54486
https://exchange.xforce.ibmcloud.com/vulnerabilities/76798
http://osvdb.org/84014
http://secunia.com/advisories/49897
http://www-01.ibm.com/support/docview.wss?uid=swg21605626
http://www.kb.cert.org/vuls/id/659791
http://www.securityfocus.com/bid/54486
https://exchange.xforce.ibmcloud.com/vulnerabilities/76798