CVE-2014-0886

The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors...

CVE-2014-0884

Cross-site scripting XSS vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0887

The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

Command injection

The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0884

CVE-2014-0884 affects IBM Lotus Protector for Mail Security (Admin Web UI) on 2.8.x before 2.8.1-22905. A cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The root cause is not detailed in the provided docum...

CVE-2014-0885

Cross-site request forgery CSRF vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-0884

Cross-site scripting XSS vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0887

Summary: CVE-2014-0887 affects IBM Lotus Protector for Mail Security. The Admin Web UI in the 2.8.x branch (before 2.8.1-22905) allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors. Affected versions: IBM Lotus Protector for Mail Security 2....

CVE-2014-0886

The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors...

CVE-2014-0886

CVE-2014-0886 affects IBM Lotus Protector for Mail Security 2.8.x prior to 2.8.1-22905, where the Admin Web UI allows remote authenticated users to bypass access restrictions and execute arbitrary commands via unspecified vectors. Affected product: IBM Lotus Protector for Mail Security (Admin Web...

CVE-2014-0887

The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors...

CVE-2014-0885

CVE-2014-0885 affects IBM Lotus Protector for Mail Security, specifically the Admin Web UI in version 2.8.x before 2.8.1-22905. The vulnerability is a Cross-Site Request Forgery (CSRF) that allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. ...

PT-2014-3921

Name of the Vulnerable Software and Affected Versions IBM Lotus Protector for Mail Security versions 2.8.x before 2.8.1-22905 Description The issue allows remote authenticated users to execute arbitrary commands with root privileges. Recommendations For IBM Lotus Protector for Mail Security...

PT-2014-3918

Name of the Vulnerable Software and Affected Versions IBM Lotus Protector for Mail Security versions 2.8.x through 2.8.1-22904 Description A cross-site scripting XSS issue exists in the Admin Web UI, allowing remote authenticated users to inject arbitrary web script or HTML. This can be achieved...

PT-2014-3919

Name of the Vulnerable Software and Affected Versions IBM Lotus Protector for Mail Security versions 2.8.x through 2.8.0 Description A cross-site request forgery CSRF issue exists in the Admin Web UI, allowing remote authenticated users to hijack the authentication of victims via unknown vectors...

CVE-2014-0885: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-3920

Name of the Vulnerable Software and Affected Versions IBM Lotus Protector for Mail Security versions 2.8.x before 2.8.1-22905 Description The issue allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands. Recommendations For IBM Lotus Protector for...

CVE-2014-0884: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...