Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-2872
HistoryAug 23, 2015 - 3:59 p.m.

Cross site scripting

2015-08-2315:59:00
PRIOn knowledge base
www.prio-n.com
5

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.4%

Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web script or HTML via (1) crafted input to index.php that is processed by certain Internet Explorer 7 configurations or (2) crafted input to the widget feature.

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.4%