Potential Privilege Escalation Vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5

CVE-2024-36359
5.4MEDIUM

Key Information

Vendor
Trend Micro
Status
Trend Micro Interscan Web Security Virtual Appliance
Vendor
CVE Published:
10 June 2024

Summary

A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Version(s)

Trend Micro InterScan Web Security Virtual Appliance < 6.5 Build 3334

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Risk change from: null to: 5.4 - (MEDIUM)

  • Vulnerability published.

Collectors

NVD DatabaseMitre Database
.