CVE-2016-9316: XSS
Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2BuildLinux1707 and earlier allow authenticated, remote users with least privileges to inject arbitrary HTML/JavaScript code into web pages. This was resolved in Version 6.5 CP 1737.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9316?
CVE-2016-9316 is categorized as a medium severity vulnerability due to its potential impact on user systems.
How do I fix CVE-2016-9316?
To remediate CVE-2016-9316, it is recommended to upgrade Trend Micro InterScan Web Security Virtual Appliance to version 6.5-SP3 or later.
Who is affected by CVE-2016-9316?
Authenticated remote users with least privileges on Trend Micro InterScan Web Security Virtual Appliance versions 6.5-SP2 and earlier are affected by CVE-2016-9316.
What type of vulnerability is CVE-2016-9316?
CVE-2016-9316 is a stored Cross-Site Scripting (XSS) vulnerability that allows injection of arbitrary web scripts.
What can attackers achieve with CVE-2016-9316?
Attackers exploiting CVE-2016-9316 can inject malicious scripts into web pages viewed by other users, potentially leading to unauthorized actions or information theft.