CVEvulnerability
CVE-2014-3922
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr parameter to addWhiteListDomain.imss.
Affected configurations
• trendmicro interscan messaging security virtual appliance 8.5.1.1516
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/126847/InterScan-Messaging-Security-Virtual-Appliance-8.5.1.1516-Cross-Site-Scripting.html Third Party Advisory
- http://seclists.org/fulldisclosure/2014/May/164 Exploit, Mailing List
- http://secunia.com/advisories/58491 Third Party Advisory
- http://www.securityfocus.com/bid/67726 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030318 Third Party Advisory, VDB Entry
- https://vimeo.com/96757096 Exploit
- http://packetstormsecurity.com/files/126847/InterScan-Messaging-Security-Virtual-Appliance-8.5.1.1516-Cross-Site-Scripting.html Third Party Advisory
- http://seclists.org/fulldisclosure/2014/May/164 Exploit, Mailing List
- http://secunia.com/advisories/58491 Third Party Advisory
- http://www.securityfocus.com/bid/67726 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030318 Third Party Advisory, VDB Entry
- https://vimeo.com/96757096 Exploit