PT-2018-12999 · Trend Micro · Trend Micro Deep Discovery Inspector

Nixwizard · Published 2018-09-28 · Updated 2018-11-16 · CVE-2018-15365

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Inspector versions 3.85 and below

Description A Reflected Cross-Site Scripting (XSS) issue could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. The attacker must be an authenticated user to exploit this issue.

Recommendations For versions 3.85 and below, update to a version above 3.85 to resolve the issue. As a temporary workaround, consider restricting access to authenticated users to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-15365

Affected Products

Trend Micro Deep Discovery Inspector

References · 4

• 🔥 https://github.com/nixwizard/CVE-2018-15365 · Exploit
• https://osv.dev/vulnerability/CVE-2018-15365 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15365 · Security Note
• https://success.trendmicro.com/solution/1121079 · Vendor Advisory