CVE-2017-11396

EPSS 0.88%
Veröffentlicht 22.09.2017 16:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle security@trendmicro.com
CVE-Watchlists
Login
Unerledigt
Login

Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trendmicro ≫ Interscan Web Security Virtual Appliance Version6.5 Update-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.88%	0.744

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

https://success.trendmicro.com/solution/1117412

Patch

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2017-11396

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-11396

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-11396

EUVD