Lucene search

MitreCVE-2017-8801

HistoryMay 05, 2017 - 7:29 p.m.

CVE-2017-8801

2017-05-0519:29:00

CWE-79

mitre

web.nvd.nist.gov

trend micro

officescan

11.0

sp1

cp 6325

xss

vulnerability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

37.0%

JSON

Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website.

Affected configurations

Nvd

Node

trendmicroofficescanMatch11.0

trendmicroofficescanMatch12.0

VendorProductVersionCPE
trendmicroofficescan11.0cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*
trendmicroofficescan12.0cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendmicro	officescan	11.0	cpe:2.3:a:trendmicro:officescan:11.0:::::::*
trendmicro	officescan	12.0	cpe:2.3:a:trendmicro:officescan:12.0:::::::*

References

files.trendmicro.com/products/officescan/11.0_SP1/readme/osce-11-sp1-patch1-win-all-criticalpatch-6325_readme.txt

success.trendmicro.com/solution/1117204-security-bulletin-trend-micro-officescan-11-xg-multiple-vulnerabilities

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

37.0%

JSON

Related for CVE-2017-8801