CVEvulnerability
CVE-2018-15365
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability.
Affected configurations
• trendmicro deep discovery inspector (<= 3.85)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/nixwizard/CVE-2018-15365/ Exploit, Mitigation, Third Party Advisory
- https://success.trendmicro.com/solution/1121079 Mitigation, Vendor Advisory
- https://github.com/nixwizard/CVE-2018-15365/ Exploit, Mitigation, Third Party Advisory
- https://success.trendmicro.com/solution/1121079 Mitigation, Vendor Advisory