CVE

Id
80149  
CVE No.
CVE-2015-2872  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web script or HTML via (1) crafted input to index.php that is processed by certain Internet Explorer 7 configurations or (2) crafted input to the widget feature.  
Phase
Assigned (20150403)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
725743 80149 CVE-2015-2872 CONFIRM:http://esupport.trendmicro.com/solution/en-US/1112206.aspx  View
725744 80149 CVE-2015-2872 CERT-VN:VU#248692  View
725745 80149 CVE-2015-2872 URL:http://www.kb.cert.org/vuls/id/248692  View
725746 80149 CVE-2015-2872 BID:76397  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10618 JVNDB-2015-005938 NetworkManager の IPv6 スタックの Neighbor Discovery プロトコルの実装におけるホップ制限を再設定される脆弱性 NetworkManager の IPv6 スタックの Neighbor Discovery (ND) プロトコルの実装の rdisc/nm-lndp-rdisc.c 内の receive_ra 関数には、ホップ制限を再設定される脆弱性が存在します。 CVE-2015-2924 80149 3.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005938.html  View