Show filters
20 Total Results
Displaying 11-20 of 20
Sort by:
Attacker Value
Unknown

CVE-2020-28579

Disclosure Date: November 18, 2020 (last updated February 22, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.
Attacker Value
Unknown

CVE-2020-28580

Disclosure Date: November 18, 2020 (last updated February 22, 2025)
A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.
Attacker Value
Unknown

CVE-2020-28581

Disclosure Date: November 18, 2020 (last updated February 22, 2025)
A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.
Attacker Value
Unknown

CVE-2020-28578

Disclosure Date: November 18, 2020 (last updated February 22, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.
Attacker Value
Unknown

CVE-2020-8603

Disclosure Date: May 27, 2020 (last updated February 21, 2025)
A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Attacker Value
Unknown

CVE-2020-8606

Disclosure Date: May 27, 2020 (last updated February 21, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance.
Attacker Value
Unknown

CVE-2020-8604

Disclosure Date: May 27, 2020 (last updated February 21, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations.
Attacker Value
Unknown

CVE-2020-8605

Disclosure Date: May 27, 2020 (last updated February 21, 2025)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability.
Attacker Value
Unknown

CVE-2019-9490

Disclosure Date: April 05, 2019 (last updated November 27, 2024)
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentials. An attacker must be an authenticated user in order to exploit the vulnerability.
0
Attacker Value
Unknown

CVE-2017-11396

Disclosure Date: September 22, 2017 (last updated November 26, 2024)
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.