Interscan Messaging Security Virtual Appliance vulnerabilities

Product

Interscan Messaging Security Virtual Appliance

by Trendmicro · last CVE Mar 3, 2021

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 6Medium 6Low 0

Severity

Exploitation

Watch

Add Interscan Messaging Security Virtual Appliance to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-7896	6.1	4%	Apr 18	Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS Affected: through 9.1
CVE-2021-25252	5.5	1%	Mar 3	Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 9.1
CVE-2020-27019	5.5	18%	Nov 9	Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific… Affected: through 9.1
CVE-2020-27018	5.5	4%	Nov 9	Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vulnerability which could allow an authenticated attacker to… Affected: through 9.1
CVE-2020-27017	4.9	6%	Nov 9	Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow an authenticated… Affected: through 9.1
CVE-2020-27693	4.4	2%	Nov 9	Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that is considered outdated Affected: through 9.1