CVE-2007-2690: Iss Proventia A Series Xpu

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic.

Affected products

• Iss Proventia A Series Xpu: up to and including 22.10; version 20.11 only; version 22.1 only; version 22.2 only; version 22.3 only; version 22.4 only; …
• Iss Proventia G Series Xpu: up to and including 22.11; version 22.1 only; version 22.2 only; version 22.3 only; version 22.4 only; version 22.5 only; …
• Iss Proventia M Series Xpu: up to and including 1.9; version 1.1 only; version 1.2 only; version 1.3 only; version 1.4 only; version 1.5 only; …

Published 2007-05-16. Last modified 2026-06-16.