CVE-2020-8464

CVE-2020-8464 affects Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2. A vulnerability allows an attacker to craft requests that appear to originate from localhost, potentially exposing the product’s admin interface to users who would not normally have access. The available d...

CVE-2020-8461

CVE-2020-8461 describes a CSRF protection bypass in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2. An attacker could induce a victim to make a specially encoded request without a valid CSRF token, effectively bypassing CSRF protections. This affects IWSVA 6.5 SP2; CVSS metrics indi...

CVE-2020-8462

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product...

CVE-2020-8462

CVE-2020-8462 describes a cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 that could allow an attacker to tamper with the product’s web interface. The connected Red Hat and CNVD entries corroborate the same issue class and target pr...

CVE-2020-8461

A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token...

CVE-2020-27010

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462...

CVE-2020-27010

CVE-2020-27010 : A cross-site scripting (XSS) vulnerability exists in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2, affecting the web interface. The issue is caused by improper validation of user-supplied input in the web interface, allowing an attacker to tamper with the ...

CVE-2020-8465: Improper Authentication

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass CVE-2020-8461 and authentication bypass CVE-2020-8464 to execute code as user root...

CVE-2020-8464: Server-Side Request Forgery (SSRF)

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have access...

CVE-2020-8461: Cross-Site Request Forgery (CSRF)

A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token...

CVE-2020-8466: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password...

CVE-2020-8463: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths...

CVE-2020-8462: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product...

CVE-2020-27010: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462...

PT-2020-16591

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A cross-site scripting XSS issue allows an attacker to tamper with the web interface of the product. Recommendations For version 6.5 SP2, at the moment, there is ...

PT-2020-20149

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A CSRF protection bypass issue could allow an attacker to trick a victim's browser into sending a specifically encoded request without a valid token...

PT-2020-20154

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A command injection issue could allow an unauthenticated attacker to execute certain commands by providing a manipulated password, when the improved password...

PT-2020-20153

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance affected versions not specified Description The issue concerns a vulnerability in the Trend Micro InterScan Web Security Virtual Appliance. No specific details about the nature of the...

PT-2020-20150

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A cross-site scripting XSS issue could allow an attacker to tamper with the web interface of the product. This affects the product's ability to maintain a secure...

PT-2020-20152

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A vulnerability could allow an attacker to send requests that appear to come from the localhost, potentially exposing the product's admin interface to users who...