Interscan Web Security Virtual Appliance vulnerabilities

Product

Interscan Web Security Virtual Appliance

by Trendmicro · last CVE Jun 10, 2024

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 5High 12Medium 10Low 0

Severity

All severities29 Critical5 High12 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Interscan Web Security Virtual Appliance to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-8461	8.8	1%	Dec 17	A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically… Affected: 6.5
CVE-2020-28579	8.8	51%	Nov 18	A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve… Affected: 6.5
CVE-2020-8605	8.8	88%	May 27	A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations Affected: 6.5
CVE-2019-9490	8.8	1%	Apr 5	A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentials Affected: 6.5
CVE-2016-9315	8.8	9%	Feb 21	Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version… Affected: through 6.5
CVE-2016-9314	7.8	3%	Feb 21	Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and… Affected: through 6.5
CVE-2020-8464	7.5	6%	Dec 17	A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose… Affected: 6.5
CVE-2020-8463	7.5	6%	Dec 17	A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating… Affected: 6.5
CVE-2020-8604	7.5	90%	May 27	A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installations Affected: 6.5
CVE-2020-28581	7.2	45%	Nov 18	A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially… Affected: 6.5
CVE-2020-28580	7.2	45%	Nov 18	A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially… Affected: 6.5
CVE-2017-11396	7.2	3%	Sep 22	Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have… Affected: 6.5