PT-2017-13248
CVE-2017-14093
·
Publicado
2017-12-15
·
Atualizado
2017-12-27
Descrição por
CVSS 3.1
6.1
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Trend Micro ScanMail for Exchange version 12.0
Description
The issue concerns the Log Query and Quarantine Query pages, which are susceptible to cross-site scripting (XSS) attacks. This type of attack occurs when an application includes user input in its output without proper validation, allowing an attacker to inject malicious scripts into the application.
Recommendations
For Trend Micro ScanMail for Exchange version 12.0, update to a version that includes a fix for this issue to prevent cross-site scripting attacks.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾