CVE-2020-27017

2020-11-0923:10:34

trendmicro

www.cve.org

trend micro

imsva

vulnerability

xxe

administrator

exploit

AI Score

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow an authenticated administrator to read arbitrary local files. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "9.1"
      }
    ]
  }
]