VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 20, 2012· Updated Jun 16, 2026

CVE-2012-2955

CVE-2012-2955

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • IBM/Lotus Protector For Mail Security5 versions
    cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:lotus_protector_for_mail_security:2.8:*:*:*:*:*:*:*
    • (no CPE)range: <=2.8
  • IBM/Proventia Network Mail Security System Virtual Appliance Firmware7 versions
    cpe:2.3:h:ibm:proventia_network_mail_security_system:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:h:ibm:proventia_network_mail_security_system:*:*:*:*:*:*:*:*
    • cpe:2.3:h:ibm:proventia_network_mail_security_system:ms3004:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.5:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.5.1:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.6:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:proventia_network_mail_security_system_firmware:2.8:*:*:*:*:*:*:*
  • IBM/ISS Proventia Network Mail Security Systemllm-create

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.