CVE-2014-3922

EUVD-2014-3859
Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addWhiteListDomainStr parameter to addWhiteListDomain.imss.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
trendmicrointerscan_messaging_security_virtual_appliance
8.5.1.1516
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/126847/InterScan-Messaging-Security-Virtual-Appliance-8.5.1.1516-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2014/May/164
http://secunia.com/advisories/58491
http://www.securityfocus.com/bid/67726
http://www.securitytracker.com/id/1030318
https://vimeo.com/96757096
http://packetstormsecurity.com/files/126847/InterScan-Messaging-Security-Virtual-Appliance-8.5.1.1516-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2014/May/164
http://secunia.com/advisories/58491
http://www.securityfocus.com/bid/67726
http://www.securitytracker.com/id/1030318
https://vimeo.com/96757096