Vulnerability CVE-2024-36359


Published: 2024-06-10   Modified: 2024-06-11

Description:
A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

 References:
https://success.trendmicro.com/dcx/s/solution/000298065
https://www.zerodayinitiative.com/advisories/ZDI-24-574/

Copyright 2026, cxsecurity.com

 

Back to Top