Description (CNA)
A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trend Micro / Trend Micro InterScan Web Security Virtual Appliance | affected 6.5 |
CWE
No CWE identifiers supplied.
References
- https://www.zerodayinitiative.com/advisories/ZDI-20-675/
- https://success.trendmicro.com/solution/000253095
ADP enrichment
No English description supplied.