Xxe

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...

CVE-2021-22522

Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data...

CVE-2021-22523

The vulnerability CVE-2021-22523 affects Micro Focus Verastream Host Integrator (version 7.8 Update 1 and earlier). It is an XML External Entity (XXE) issue in the product likely involving XML processing, with the described impact of controlling a web browser and hijacking user sessions. Connecte...

CVE-2021-22523

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...

CVE-2021-22522

Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data...

CVE-2021-22522

CVE-2021-22522 is a Reflected Cross-Site Scripting vulnerability reported in Micro Focus Verastream Host Integrator affecting versions 7.8 Update 1 and earlier . The issue could allow disclosure of confidential data. The connected sources confirm the basic vulnerability class and affected product...

Safeguarding against cryptomining attacks

A look at popular coinmining attacks and how Trend Micro can help protect you...

PT-2021-15124

Name of the Vulnerable Software and Affected Versions Micro Focus Verastream Host Integrator versions 7.8 Update 1 and earlier Description The issue is related to an XML External Entity vulnerability, which could allow the control of a web browser and hijacking of user sessions. Recommendations F...

Micro Focus Verastream Host Integrator 代码问题漏洞

Micro Focus Verastream Host Integrator is an asset management platform from Micro Focus UK. The platform supports the management of servers, web applications, and other assets. A security vulnerability exists in Micro Focus Verastream Host Integrator 7.8 Update 1 and prior versions that could all...

PT-2021-15123

Name of the Vulnerable Software and Affected Versions Micro Focus Verastream Host Integrator versions 7.8 Update 1 and earlier Description The issue is a Reflected Cross-Site Scripting vulnerability that could allow disclosure of confidential data. Recommendations For versions 7.8 Update 1 and...

CVE-2021-22522: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data...

CVE-2021-22523: Improper Restriction of XML External Entity Reference

XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions...

CVE-2021-32463

An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service SaaS, Worry-Free Business Security 10.0 SP1 and Worry-Free Servgices could allow a local attacker to escalate privileges and delete files with system privileges on affected...

CVE-2021-32463

An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service SaaS, Worry-Free Business Security 10.0 SP1 and Worry-Free Servgices could allow a local attacker to escalate privileges and delete files with system privileges on affected...

Design/Logic Flaw

An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service SaaS, Worry-Free Business Security 10.0 SP1 and Worry-Free Servgices could allow a local attacker to escalate privileges and delete files with system privileges on affected...

CVE-2021-32463

Trend Micro CVE-2021-32463 describes an incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One (and related products) that can let a local attacker escalate privileges and delete system-level files. The issue requires the attacker to execute low-privilege code on ...

CVE-2021-32463

An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service SaaS, Worry-Free Business Security 10.0 SP1 and Worry-Free Servgices could allow a local attacker to escalate privileges and delete files with system privileges on affected...

CVE-2021-32463: Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service SaaS, Worry-Free Business Security 10.0 SP1 and Worry-Free Servgices could allow a local attacker to escalate privileges and delete files with system privileges on affected...

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting

Overview Trend Micro Incorporated has released a security update for InterScan Web Security Virtual Appliance IWSVA. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solutions through JVN. Impact A user may be redirected to an arbitrary website due to the...

PT-2021-5675

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2021 version 11 Description The issue is related to improper access control, which could allow an attacker to establish a connection leading to full local privilege escalation within the application. To exploit...