IW
Product
Interscan Web Security Virtual Appliance
29
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 12Medium 10Low 0
Watch
Add Interscan Web Security Virtual Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9269 | 9.9 | Feb 21 | Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier… Affected: through 6.5 |
| CVE-2020-8466 | 9.8 | Dec 17 | A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an… Affected: 6.5 |
| CVE-2020-8465 | 9.8 | Dec 17 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass… Affected: 6.5 |
| CVE-2020-28578 | 9.8 | Nov 18 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and… Affected: 6.5 |
| CVE-2020-8606 | 9.8 | May 27 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan… Affected: 6.5 |
| CVE-2020-8461 | 8.8 | Dec 17 | A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically… Affected: 6.5 |
| CVE-2020-28579 | 8.8 | Nov 18 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve… Affected: 6.5 |
| CVE-2020-8605 | 8.8 | May 27 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations Affected: 6.5 |
| CVE-2019-9490 | 8.8 | Apr 5 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentials Affected: 6.5 |
| CVE-2016-9315 | 8.8 | Feb 21 | Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version… Affected: through 6.5 |
| CVE-2016-9314 | 7.8 | Feb 21 | Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and… Affected: through 6.5 |
| CVE-2020-8464 | 7.5 | Dec 17 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose… Affected: 6.5 |
| CVE-2020-8463 | 7.5 | Dec 17 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating… Affected: 6.5 |
| CVE-2020-8604 | 7.5 | May 27 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations Affected: 6.5 |
| CVE-2020-28581 | 7.2 | Nov 18 | A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially… Affected: 6.5 |
| CVE-2020-28580 | 7.2 | Nov 18 | A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially… Affected: 6.5 |
| CVE-2017-11396 | 7.2 | Sep 22 | Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have… Affected: 6.5 |
| CVE-2017-6339 | 6.5 | Apr 5 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data Affected: through 6.5 |
| CVE-2017-6338 | 6.5 | Apr 5 | Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like… Affected: through 6.5 |
| CVE-2020-8603 | 6.1 | May 27 | A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected… Affected: 6.5 |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 6.5 |
| CVE-2024-36359 | 5.4 | Jun 10 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected… Affected: 6.5 |
| CVE-2021-31521 | 5.4 | Jun 17 | Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XSS) vulnerability in the product's Captive Portal Affected: 6.5 |
| CVE-2017-6340 | 5.4 | Apr 5 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user… Affected: through 6.5 |
| CVE-2016-9316 | 5.4 | Feb 21 | Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance… Affected: through 6.5 |
| CVE-2020-8462 | 4.8 | Dec 17 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product Affected: 6.5 |
| CVE-2020-27010 | 4.8 | Dec 17 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product… Affected: 6.5 |
| CVE-2014-8510 | – | Nov 7 | The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote authenticated users to read arbitrary files via vectors related… Affected: 5.1; 5.5; 5.6; 6.0 |
| CVE-2009-0612 | – | Feb 17 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards… Affected: 3.1 |
Showing 29