Lucene search
K

CVE-2020-27017

🗓️ 09 Nov 2020 23:10:34Reported by trendmicroType 
cve
 cve
🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

Trend Micro IMSVA 9.1 XXE vulnerability allows admin to read local file

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2020-27017
6 Nov 202012:36
circl
CNVD
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) XXE Vulnerability
6 Nov 202000:00
cnvd
Check Point Advisories
Trend Micro IMSVA External Entity Injection (CVE-2020-27017)
27 Dec 202000:00
checkpoint_advisories
Cvelist
CVE-2020-27017
9 Nov 202023:10
cvelist
EUVD
EUVD-2020-19541
7 Oct 202500:30
euvd
NVD
CVE-2020-27017
9 Nov 202023:15
nvd
OSV
CVE-2020-27017
9 Nov 202023:15
osv
Packet Storm
Trend Micro IMSVA CSRF / XML Injection / SSRF / File Disclosure
5 Nov 202000:00
packetstorm
Prion
Xxe
9 Nov 202023:15
prion
RedhatCVE
CVE-2020-27017
22 May 202517:33
redhatcve
Rows per page
[
  {
    "product": "Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "9.1"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
policiesrequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
policyrequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
namerequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
noterequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
enablerequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
versionrequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
orderrequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
typerequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
routerequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
directionrequest bodyws_policies.imssXXE vulnerability via XML payload in policy update endpoint allowing local file read (XXE).CWE-611
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:20Current
4.9Medium risk
Vulners AI Score4.9
CVSS 24
CVSS 3.14.9
EPSS0.00998
38