Trend Micro Interscan Messaging Security Virtual Appliance (Imsva) vulnerabilities
6 vulnerabilities
Known vulnerabilities in Trend Micro Interscan Messaging Security Virtual Appliance (Imsva), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-27018trend microtrend micro interscan messaging security virtual appliance (imsva)+1
EPSS score3.51%
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vulnerability which could allow an authenticated attacker to abuse the product's web server and grant access to web resources or parts of local files. An attacker must already have obtained authenticated privileges on the product to exploit this vulnerability.CVE-2020-27693trend microtrend micro interscan messaging security virtual appliance (imsva)+1EPSS score1.77%
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that is considered outdated.CVE-2020-27016trend microtrend micro interscan messaging security virtual appliance (imsva)+1EPSS score1.90%
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.CVE-2020-27694trend microtrend micro interscan messaging security virtual appliance (imsva)+1EPSS score7.37%
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may vulnerable to attack.CVE-2020-27017trend microtrend micro interscan messaging security virtual appliance (imsva)+1EPSS score6.47%
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow an authenticated administrator to read arbitrary local files. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.CVE-2020-27019trend microtrend micro interscan messaging security virtual appliance (imsva)+1EPSS score17.95%
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific database and key.