CVE-2012-2955: IBM Lotus Protector For Mail Security

Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allow remote attackers to inject arbitrary web script or HTML via the query string.

Affected products

• IBM Lotus Protector For Mail Security: version 2.1 only; version 2.5 only; version 2.5.1 only; version 2.8 only
• IBM Proventia Network Mail Security System
• IBM Proventia Network Mail Security System Firmware: version 2.5 only; version 2.5.0.2 only; version 2.5.1 only; version 2.6 only; version 2.8 only

Published 2012-07-20. Last modified 2026-06-16.