medium4.3Public exploit code
CVE-2012-2955
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Proventia Network Mail Security System 2.5 - POST File Read2012-08-08 · webapps · windows · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Proventia Network Mail Security System Firmware | Versions 2.5, 2.5.0.2, 2.5.1, 2.6, 2.8 |
| Ibm | Proventia Network Mail Security System | All versions Version ms3004 |
| Ibm | Lotus Protector For Mail Security | Versions 2.1, 2.5, 2.5.1, 2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/84014
- http://secunia.com/advisories/49897
- http://www-01.ibm.com/support/docview.wss?uid=swg21605626
- http://www.kb.cert.org/vuls/id/659791
- http://www.securityfocus.com/bid/54486
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76798
- http://osvdb.org/84014
- http://secunia.com/advisories/49897
- http://www-01.ibm.com/support/docview.wss?uid=swg21605626
- http://www.kb.cert.org/vuls/id/659791
- http://www.securityfocus.com/bid/54486
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76798