VULNERABILITY INTELLIGENCE
CVE-2017-11396
CVSS score7.2 HIGH
EPSS probability3.20%
CISA KEVNot currently listed
Published2017-09-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.
Primary references
- security@trendmicro.com — Mitigation, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory