Interscan Web Security Virtual Appliance vulnerabilities

Product

Interscan Web Security Virtual Appliance

by Trendmicro · last CVE Jun 10, 2024

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 5High 12Medium 10Low 0

Severity

All severities29 Critical5 High12 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Interscan Web Security Virtual Appliance to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-6339	6.5	4%	Apr 5	Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data Affected: through 6.5
CVE-2017-6338	6.5	4%	Apr 5	Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low privileges like… Affected: through 6.5
CVE-2020-8603	6.1	2%	May 27	A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected… Affected: 6.5
CVE-2021-25252	5.5	1%	Mar 3	Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 6.5
CVE-2024-36359	5.4	0%	Jun 10	A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected… Affected: 6.5
CVE-2021-31521	5.4	1%	Jun 17	Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XSS) vulnerability in the product's Captive Portal Affected: 6.5
CVE-2017-6340	5.4	2%	Apr 5	Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a 'Reports Only' user… Affected: through 6.5
CVE-2016-9316	5.4	3%	Feb 21	Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance… Affected: through 6.5
CVE-2020-8462	4.8	1%	Dec 17	A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product Affected: 6.5
CVE-2020-27010	4.8	1%	Dec 17	A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product… Affected: 6.5