CVE-2020-8464: Server-Side Request Forgery (SSRF)

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access...

CVE-2020-8461: Cross-Site Request Forgery (CSRF)

A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token...

CVE-2020-27010: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462...

CVE-2020-8466: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password...

CVE-2020-8462: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product...

PT-2020-16591

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A cross-site scripting XSS issue allows an attacker to tamper with the web interface of the product. Recommendations For version 6.5 SP2, at the moment, there is ...

CVE-2020-8463: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths...

PT-2020-20153

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance affected versions not specified Description The issue concerns a vulnerability in the Trend Micro InterScan Web Security Virtual Appliance. No specific details about the nature of the...

Trend Micro IWSVA CSRF / XSS / Bypass / SSRF / Code Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Trend Micro InterScan Web Security Virtual Appliance IWSVA vulnerable version: IWSVA 6.5 SP2 EN Patch 4 Build 1919 fixed versio...

CVE-2020-5360

Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems...

CVE-2020-5360

Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems...

CVE-2020-5360

CVE-2020-5360 refers to a buffer under-read vulnerability in Dell BSAFE Micro Edition Suite, before version 4.5. The NVD entry notes unauthenticated remote exploitation with network access potentially causing undefined behavior or a crash (availability impact). Corporate context in connected docu...

CVE-2020-5359

CVE-2020-5359 affects Dell BSAFE Micro Edition Suite, versions prior to 4.5. The vulnerability is an unchecked return value vulnerability allowing an unauthenticated remote attacker to modify and corrupt encrypted data. No explicit fix/version remediation is provided in the connected documents; m...

Dell BSAFE Micro Edition Suite security vulnerabilities

The Dell BSAFE Micro Edition Suite is a Dell development kit that provides encryption, certificate, and transport layer security for c/c++ applications, devices, and systems. A security vulnerability exists in the Dell BSAFE Micro Edition Suite that stems from susceptibility to an unchecked retur...

CVE-2020-5359: Missing Standardized Error Handling Mechanism

Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data...

CVE-2020-5360: Buffer Under-read

Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems...

PT-2020-18426

Name of the Vulnerable Software and Affected Versions Dell BSAFE Micro Edition Suite versions prior to 4.5 Description The issue allows an unauthenticated remote attacker to potentially modify and corrupt encrypted data due to an Unchecked Return Value Vulnerability. Recommendations For versions...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Script Vulnerabilities

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A cross-site scripting vulnerability exists in Trend Micro InterScan Web Security Virtual...

Trend Micro InterScan Web Security Virtual Appliance Authorization Issue Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A command execution vulnerability exists in Trend Micro InterScan Web Security Virtual...

Dell BSAFE Micro Edition Suite buffer error vulnerability

The Dell BSAFE Micro Edition Suite is a Dell development toolkit that provides encryption, certificate and transport layer security for c/c++ applications, devices and systems. A buffer overflow vulnerability exists in Dell BSAFE Micro Edition Suite version 4.5, which stems from vulnerability to...