Lucene search

[email protected]NVD:CVE-2024-36359

HistoryJun 10, 2024 - 10:15 p.m.

CVE-2024-36359

2024-06-1022:15:11

[email protected]

web.nvd.nist.gov

cross-site scripting

trend micro

iwsva 6.5

vulnerability

privilege escalation

low-privileged code

target system

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

16.3%

JSON

A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

References

success.trendmicro.com/dcx/s/solution/000298065

www.zerodayinitiative.com/advisories/ZDI-24-574/