CVE-2014-3922: XSS
First published: Fri May 30 2014(Updated: )
Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr parameter to addWhiteListDomain.imss.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Interscan Messaging Security Virtual Appliance | =8.5.1.1516 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/126847/InterScan-Messaging-Security-Virtual-Appliance-8.5.1.1516-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2014/May/164
- http://secunia.com/advisories/58491
- http://www.securityfocus.com/bid/67726
- http://www.securitytracker.com/id/1030318
- https://vimeo.com/96757096
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/trendmicro
- canonical/trendmicro interscan messaging security virtual appliance
- version/trendmicro interscan messaging security virtual appliance/8.5.1.1516