Known vulnerabilities in InterScan Web Security Virtual Appliance (IWSVA)

Known vulnerabilities in InterScan Web Security Virtual Appliance (IWSVA)

Vendor: Trend Micro

Software: InterScan Web Security Virtual Appliance (IWSVA)

Software CPE: cpe:2.3:a:trend_micro:interscan_web_security_virtual_appliance:*:*:*:*:*:*:*:*

Website: https://www.trendmicro.com/

Total vulnerabilities: 11

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU91005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-36359	CWE-79	Low	No	No	6.5 SP3 Patch 2 b3367	04.06.2024	SB2024060450
#VU54135 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-31521	CWE-79	Medium	No	No	6.5 SP2 CP1943	15.06.2021	SB2021061526
#VU51109 - Resource exhaustion CVE-2021-25252	CWE-400	Medium	No	No	6.5 CP1926	02.03.2021	SB2021030220
#VU28302 - Improper Authentication CVE-2020-8606	CWE-287	High	Available	No	6.5 SP2 Patch 4	28.05.2020	SB2020052801
#VU28301 - Command injection CVE-2020-8605	CWE-77	Medium	Available	No	6.5 SP2 Patch 4	28.05.2020	SB2020052801
#VU28300 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-8604	CWE-22	Medium	Available	No	6.5 SP2 Patch 4	28.05.2020	SB2020052801
#VU28299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-8603	CWE-79	Low	No	No	6.5 SP2 Patch 4	28.05.2020	SB2020052801
#VU36024 - Credentials Management CVE-2019-9490	CWE-255	High	No	No	-	06.04.2019	SB2019040610
#VU45890 - Improper input validation CVE-2017-11396	CWE-20	Medium	No	No	-	22.09.2017	SB2017092210
#VU6847 - Improper Control of Generation of Code ('Code Injection')	CWE-94	High	No	No	-	31.05.2017	SB2017053117
#VU41148 - Improper input validation CVE-2014-8510	CWE-20	Low	No	No	-	07.11.2014	SB2014110701