IBM Proventia Network Mail Security System Virtual Appliance vulnerabilities

5 CVEs affecting IBM Proventia Network Mail Security System Virtual Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0155, published 2010-09-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-1240, published 2009-04-03. High severity, CVSS 10.0. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint…
CVE-2010-0154, published 2010-09-14. Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote…
CVE-2010-0152, published 2010-09-14. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow…
CVE-2010-0155, published 2010-09-14. Low severity, CVSS 3.5. EPSS: 0.7% chance of exploitation in the next 30 days. CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote…
CVE-2010-0153, published 2010-09-14. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2…