CVE-2024-36359

CVSS v3 5.4 (Medium)

EPSS 0.05 % (17^th)

A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CNA: Trend Micro, Inc.
security@trendmicro.com
Published Date: 2024-06-10 22:15:11
(6 weeks ago)
Updated Date: 2024-06-11 13:54:12
(6 weeks ago)