CVE-2012-2955

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-07-20 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.

Affected products

IBM Lotus Protector For Mail Security: 2.1, 2.5, 2.5.1, 2.8
IBM Proventia Network Mail Security System: ms3004
IBM Proventia Network Mail Security System Firmware: 2.5, 2.5.0.2, 2.5.1, 2.6, 2.8

References

http://osvdb.org/84014
http://secunia.com/advisories/49897
http://www-01.ibm.com/support/docview.wss?uid=swg21605626
http://www.kb.cert.org/vuls/id/659791
http://www.securityfocus.com/bid/54486
https://exchange.xforce.ibmcloud.com/vulnerabilities/76798
http://osvdb.org/84014
http://secunia.com/advisories/49897
http://www-01.ibm.com/support/docview.wss?uid=swg21605626
http://www.kb.cert.org/vuls/id/659791
http://www.securityfocus.com/bid/54486
https://exchange.xforce.ibmcloud.com/vulnerabilities/76798

Get alerted when CVE-2012-2955 or the next vulnerability affects your stack