PT-2017-13248
CVE-2017-14093
·
Published
2017-12-15
·
Updated
2017-12-27
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Trend Micro ScanMail for Exchange version 12.0
Description
The issue concerns the Log Query and Quarantine Query pages, which are susceptible to cross-site scripting (XSS) attacks. This type of attack occurs when an application includes user input in its output without proper validation, allowing an attacker to inject malicious scripts into the application.
Recommendations
For Trend Micro ScanMail for Exchange version 12.0, update to a version that includes a fix for this issue to prevent cross-site scripting attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾