Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4m6g-4889-mff3

Опубликовано: 27 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues.

Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability.

This is similar to, but not identical to CVE-2023-32537.

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues.

Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability.

This is similar to, but not identical to CVE-2023-32537.

EPSS

Процентиль: 59%
0.00385
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32537.

CVSS3: 4.1
fstec
больше 2 лет назад

Уязвимость средства мониторинга и управления безопасностью Trend Micro Apex Central, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга

EPSS

Процентиль: 59%
0.00385
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79