CVE-2020-27010: XSS
A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-27010?
CVE-2020-27010 is a cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2.
How does CVE-2020-27010 affect Trend Micro InterScan Web Security Virtual Appliance?
CVE-2020-27010 allows an attacker to tamper with the web interface of the product.
What is the severity of CVE-2020-27010?
CVE-2020-27010 has a severity rating of 4.8 (medium).
How can an attacker exploit CVE-2020-27010?
An attacker can exploit CVE-2020-27010 by injecting malicious scripts into the web interface of Trend Micro InterScan Web Security Virtual Appliance.
Is there a fix available for CVE-2020-27010?
Yes, Trend Micro has provided a fix for CVE-2020-27010. Please refer to the official reference for more information.