CVE-2017-9037: XSS

Published May 25, 2017

Updated

Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) S44, (2) S5, (3) Sactionfail, (4) Sptnupdate, (5) T113, (6) T114, (7) T115, (8) T117117, (9) T118, (10) Tactionfail, (11) Tptnupdate, (12) textarea, (13) textfield5, or (14) tmLastConfigFileModifiedDate parameter to notification.cgi.

Affected Software

1 affected component

trendmicro Serverprotect Linux=3.0

Remediation

Patch Available

https://success.trendmicro.com/solution/1117411

Event History

May 25, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-9037?

CVE-2017-9037 is classified as a high severity vulnerability due to its exploitation potential for cross-site scripting attacks.

How do I fix CVE-2017-9037?

To fix CVE-2017-9037, update Trend Micro ServerProtect for Linux to the latest version or apply the necessary patches provided by Trend Micro.

What type of vulnerabilities are included in CVE-2017-9037?

CVE-2017-9037 includes multiple cross-site scripting (XSS) vulnerabilities.

Who is affected by CVE-2017-9037?

CVE-2017-9037 affects users of Trend Micro ServerProtect for Linux version 3.0 prior to CP 1531.

Can CVE-2017-9037 be exploited remotely?

Yes, CVE-2017-9037 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.