Unscored severity · published May 30, 2014
CVE-2014-3922
Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr parameter to addWhiteListDomain.imss.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Interscan Messaging Security Virtual Appliance · Trendmicro
8.5.1.1516 · source: NVD
Affected product
IM
Interscan Messaging Security Virtual Appliance
Trendmicro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3922
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3922
Third Party Advisory
http://packetstormsecurity.com/files/126847/InterScan-Messaging-Security-Virtual-Appliance-8.5.1.1516-Cross-Site-Scripting.html
Exploit
http://seclists.org/fulldisclosure/2014/May/164
Third Party Advisory
http://secunia.com/advisories/58491
Third Party Advisory
http://www.securityfocus.com/bid/67726
Third Party Advisory
http://www.securitytracker.com/id/1030318
Exploit
https://vimeo.com/96757096
More from Interscan Messaging Security Virtual Appliance
8.8
CVE-2020-27694
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may vulnerable to attack
8.8
CVE-2020-27016
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify…
8.8
CVE-2017-11392
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable…
8.8
CVE-2017-11391
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable…
8.8
CVE-2017-6398
An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600