VULNERABILITY INTELLIGENCE

CVE-2014-8510

CVSS score4 MEDIUM
EPSS probability1.49%
CISA KEVNot currently listed
Published2014-11-07
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N

Description

The AdminUI in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) before 6.0 HF build 1244 allows remote authenticated users to read arbitrary files via vectors related to configuration input when saving filters.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references