CVE-2010-0153: IBM Proventia Network Mail Security System Virtual Appliance

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change settings or (2) conduct denial of service attacks.

Affected products

• IBM Proventia Network Mail Security System Virtual Appliance: any version
• IBM Proventia Network Mail Security System Virtual Appliance Firmware: version 1.6 only; version 2.5 only

Published 2010-09-14. Last modified 2026-06-16.