Trend Micro Deep Discovery XSS

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-DDI-081815b.txt Vendor: ================================ www.trendmicro.com Product: ============================================================== Trend Micro...

CVE-2015-2872

Multiple cross-site scripting XSS vulnerabilities in Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web...

CVE-2015-2872

Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances is affected by CVE-2015-2872 through input handling flaws in the web interface: crafted input to index.php and the widget feature can trigger cross-site scripting. Documented impact: unauthenticated remote injection of...

Trend Micro Deep Discovery threat appliance contains multiple vulnerabilities

Overview Multiple versions of the Trend Micro Deep Discovery threat appliance are vulnerable to cross-site scripting and authentication bypass. Description The Trend Micro Deep Discovery platform "enables you to detect, analyze, and respond to today’s stealthy, targeted attacks in real time." It...