CVE-2014-3922 in Trend Micro Interscan Messaging Security Virtual Appliance

Résumé (Anglaise)

Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr parameter to addWhiteListDomain.imss.

Réserver

30/05/2014

Divulgation

30/05/2014

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
13400	Trend Micro Interscan Messaging Security Virtual Appliance addWhiteListDomain.imss cross site scripting	79	Preuve de concept	Solution de contournement	CVE-2014-3922