HTTP traffic filtering module Privilege Escalation

The vulnerability of the HTTP traffic filtering module in Trend Micro InterScan Web Security Virtual Appliance IWSVA is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and carry out...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability (CNVD-2024-40821)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A cross-site scripting vulnerability exists in the Trend Micro InterScan Web Security...

CVE-2024-36359

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2024-36359: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...

Trend Micro Micro InterScan Web Security Virtual Appliance Security Vulnerabilities

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A cross-site scripting vulnerability exists in the Trend Micro InterScan Web Security...

PT-2023-9240 · Trend Micro · Trend Micro Interscan Web Security Virtual Appliance

Name of the Vulnerable Software and Affected Versions: Trend Micro InterScan Web Security Virtual Appliance version 6.5 Description: A cross-site scripting XSS issue in the HTTP Inspection module of Trend Micro InterScan Web Security Virtual Appliance is related to the lack of protection for the...

CVE-2021-31521

Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting XSS vulnerability in the product's Captive Portal...

CVE-2021-31521

Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting XSS vulnerability in the product's Captive Portal...

CVE-2021-31521

Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting XSS vulnerability in the product's Captive Portal...

Cross site scripting

Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting XSS vulnerability in the product's Captive Portal...

CVE-2021-31521

Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting XSS vulnerability in the product's Captive Portal...

CVE-2021-31521

The CVE-2021-31521 issue affects Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5, specifically the Captive Portal, where user-supplied data in the portal can trigger a reflected XSS. Public records timestamped across multiple feeds describe the root cause as inadequate sanitizati...

PT-2021-19403

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 Description The issue is related to a reflected cross-site scripting XSS vulnerability found in the Captive Portal of the product. This type of vulnerability allows an attacker t...

CVE-2021-31521: Improper Neutralization of Input During Web Page Generation

Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting XSS vulnerability in the product's Captive Portal...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Script Vulnerabilities

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A cross-site scripting vulnerability exists in Trend Micro InterScan Web Security Virtual...

Trend Micro InterScan Web Code Execution

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Trend Micro InterScan Web Security Virtual Appliance Code Execution

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance exists due to the lack of measures taken to neutralize special elements used in the operating system’s command chain. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Trend Micro InterScan Web Security Virtual Appliance Auth Bypass

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

Trend Micro InterScan Web Security Virtual Appliance Info Disclosure

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Trend Micro InterScan Web Security Virtual Appliance Command Execution Vulnerability (CNVD-2020-73776)

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A command execution vulnerability exists in Trend Micro InterScan Web Security Virtual...