XSS in IBM Lotus Protector For Mail Security
CVE-2012-2955
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.025 (82.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Lotus_protector_for_mail_security — versions 2.1, 2.5, 2.5.1
- Ibm Proventia_network_mail_security_system — versions ms3004
- Ibm Proventia_network_mail_security_system_firmware — versions 2.5, 2.5.0.2, 2.5.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_OSVDB, vdb-entry)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (vdb-entry, x_refsource_XF)