CVE-2018-15365: trend micro trend micro deep discovery inspector Cross-site Scripting
Vulnerability summary
CVE-2018-15365 is a medium (CVSS 5.4) Cross-site Scripting vulnerability in trend micro trend micro deep discovery inspector. EPSS estimates a 0.81% chance of exploitation in the next 30 days, higher than 56.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 28-09-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.81%
Chance of exploitation in the next 30 days
Percentile
56%
Versus all other CVEs
30-day change
0.00 pp
From 0.81% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCve 2018 15365
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Trend micro1 product
Trendmicro1 product
- deep_discovery_inspector≤ 3.85
2 vendors · 2 products