CVE-2020-8462: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product...

PT-2020-16591

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A cross-site scripting XSS issue allows an attacker to tamper with the web interface of the product. Recommendations For version 6.5 SP2, at the moment, there is ...

PT-2020-20153

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance affected versions not specified Description The issue concerns a vulnerability in the Trend Micro InterScan Web Security Virtual Appliance. No specific details about the nature of the...

PT-2020-20151

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A vulnerability could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths. Recommendations For Trend Micro...

PT-2020-20152

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A vulnerability could allow an attacker to send requests that appear to come from the localhost, potentially exposing the product's admin interface to users who...

PT-2020-20149

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A CSRF protection bypass issue could allow an attacker to trick a victim's browser into sending a specifically encoded request without a valid token...

PT-2020-20150

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A cross-site scripting XSS issue could allow an attacker to tamper with the web interface of the product. This affects the product's ability to maintain a secure...

CVE-2020-8463: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths...

CVE-2020-8464: Server-Side Request Forgery (SSRF)

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access...

CVE-2020-8466: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password...

CVE-2020-28581

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

CVE-2020-28581

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

PT-2020-17021

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A command injection issue in ModifyVLANItem could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS command...

PT-2020-5819

Name of the Vulnerable Software and Affected Versions: Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance could allow an unauthenticated, remote attacker to send a specially crafted HTTP message...

CVE-2020-28578: Out-of-bounds Write

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...

CVE-2020-28579: Out-of-bounds Write

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...

CVE-2020-28580: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

CVE-2020-28581: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

PT-2020-17020

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A command injection issue in the AddVLANItem function could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary ...

PT-2020-17019

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A vulnerability could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...