CVE-2020-8462 in InterScan Web Security Virtual Appliance

Summary

by MITRE • 12/18/2020

A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Disclosure: 12/18/2020
• Moderation: accepted
• Entry: VDB-166549
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 3.5 (VulDB)
• EPSS: 0.01134
• KEV: no
• Activities: very low
• Sector: Transportation, Education, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8462
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8462
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8462/