Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-15365

A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trendmicro

Description

A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trend Micro Trend Micro Deep Discovery Inspector

  • 3.85affected

References