Vulnerabilities

TI-2021-07509 CVE-2021-25252 · GHSA-f392-jc49-593j

Uncontrolled resource consumption in Trend Micro Virus Scan API Engine

LOW 26

Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a sp…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00617 Published 2021-03-03 No fix listed CWE-400

TI-2020-16796 CVE-2020-27694 · GHSA-wcpj-4jrv-569v

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a…

MEDIUM 48

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may vulnerable to attack.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07367 Published 2020-11-09 No fix listed

TI-2020-16795 CVE-2020-27693 · GHSA-cp9g-g6vr-5grf

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores…

LOW 24

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that is considered outdated.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.01775 Published 2020-11-09 No fix listed CWE-916

TI-2020-16440 CVE-2020-27019 · GHSA-7f7p-8xm3-467q

Missing authentication in Trend Micro InterScan Messaging Security Virtual Appliance

MEDIUM 42

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific database and key.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.17949 Published 2020-11-09 No fix listed CWE-306

TI-2020-16439 CVE-2020-27018 · GHSA-h8rc-vwv6-26wf

Server-side request forgery in Trend Micro InterScan Messaging Security Virtual Appliance

LOW 31

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vulnerability which could allow an authenticated attacker to abuse the product's web server and grant…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.03509 Published 2020-11-09 No fix listed CWE-918

TI-2020-16438 CVE-2020-27017 · GHSA-m5fq-fj2f-7888

XML external entity injection in Trend Micro InterScan Messaging Security Virtual…

LOW 32

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow an authenticated administrator to read arbitrary local files…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.06469 Published 2020-11-09 No fix listed CWE-611

TI-2020-16437 CVE-2020-27016 · GHSA-r87g-pphp-cg7r

Cross-site request forgery in Trend Micro InterScan Messaging Security Virtual Appliance

MEDIUM 42

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify policy rules by tricking an authenticated…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01898 Published 2020-11-09 No fix listed CWE-352

TI-2018-02645 CVE-2018-3609 · GHSA-999p-3hf6-2qgp

Insufficiently protected credentials in Trend Micro InterScan Messaging Security Virtual…

MEDIUM 55

A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information in a particular log file that could be u…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.21446 Published 2018-02-16 No fix listed CWE-522

TI-2017-08419 CVE-2017-11392 · GHSA-c97v-9pfc-p975

Command injection in Trend Micro InterScan Messaging Security Virtual Appliance

MEDIUM 63

Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.34092 Published 2017-08-03 No fix listed CWE-77

TI-2017-08418 CVE-2017-11391 · GHSA-j9pc-9px3-mp86

Command injection in Trend Micro InterScan Messaging Security Virtual Appliance

HIGH 73

Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.62132 Published 2017-08-03 No fix listed CWE-77

TI-2017-05507 CVE-2017-7896 · GHSA-38qg-q9cx-jv22

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

LOW 34

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.04279 Published 2017-04-18 No fix listed CWE-79

TI-2017-04205 CVE-2017-6398 · GHSA-w5hc-4jjm-xx8x

An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance)…

HIGH 70

An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.54068 Published 2017-03-14 No fix listed CWE-78

TI-2014-03194 CVE-2014-3922 · GHSA-rh6h-vr6m-q4jf

Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security…

LOW 24

Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr par…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02091 Published 2014-05-30 No fix listed CWE-79

Vulnerabilities

Filters