Trend Micro InterScan Messaging Security Suite Cross-Site Scripting Vulnerability

  Severity: MEDIUM
  CVE Identifier: CVE-2012-2995
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or HTML via (1) the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or (2) the src parameter to initUpdSchPage.imss.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1000552
  Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention

  AFFECTED SOFTWARE AND VERSION

  • trendmicro interscan_messaging_security_suite 7.1

Featured Stories