IBM Lotus Protector For Mail Security vulnerabilities

7 CVEs affecting IBM Lotus Protector For Mail Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-2991, published 2016-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-2202, published 2012-07-27. Low severity, CVSS 3.5. EPSS: 3% chance of exploitation in the next 30 days. Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security System allows remote…
CVE-2012-2955, published 2012-07-20. Medium severity, CVSS 4.3. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2.8 and IBM ISS Proventia Network Mail Security…
CVE-2014-0887, published 2014-03-25. High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days. The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
CVE-2014-0886, published 2014-03-25. High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days. The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via…
CVE-2014-0884, published 2014-03-25. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject arbitrary web script or HTML…
CVE-2016-2991, published 2016-12-01. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Protector for Mail Security 2.8.0.0 through 2.8.1.0 before 2.8.1.0-22115 allow remote authenticated users to inject arbitrary web…
CVE-2014-0885, published 2014-03-25. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to hijack the authentication of…