CVE-2016-9316: Improper Neutralization of Input During Web Page Generation

Multiple stored Cross-Site-Scripting XSS vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allow authenticated, remote users with least privileges to inject arbitrary...

PT-2017-10052

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance IWSVA versions prior to 6.5 CP 1737 Description A privilege escalation issue allows authenticated, remote users with least privileges to change the Master Admin's password and/or add new adm...

PT-2017-10053

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance IWSVA versions prior to 6.5 CP 1737 Description The issue allows authenticated, remote users with least privileges to inject arbitrary HTML/JavaScript code into web pages due to multiple...