EDB-41361

functional

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities

view exploit source exploit_dbverifiedtype webappsauthor SlidingWindowpublished 2016-11-28catalog exploit_db

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-9316US	medium5.4	2.77% (86th)	Exploit	2017-02-21
Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA)…
CVE-2016-9315US	high8.8	8.98% (95th)	Exploit	2017-02-21
Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_L…
CVE-2016-9314US	high7.8	3.02% (87th)	Exploit	2017-02-21
Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and ear…
CVE-2016-9269US	critical9.9	13.4% (96th)	Exploit	2017-02-21
Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier al…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.