NVD

Id
24850  
Name
CVE-2015-2872  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web script or HTML via (1) crafted input to index.php that is processed by certain Internet Explorer 7 configurations or (2) crafted input to the widget feature.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-08-23  
Modified Date
2016-11-28  
Seq
2015-2872  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
131148 24850 CVE-2015-2872 http://esupport.trendmicro.com/solution/en-US/1112206.aspx  View
131149 24850 CVE-2015-2872 VU#248692  View
131150 24850 CVE-2015-2872 76397  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9084 JVNDB-2015-004404 Trend Micro Deep Discovery Threat アプライアンスのソフトウェア上で稼働する Deep Discovery Inspector におけるクロスサイトスクリプティングの脆弱性 Trend Micro Deep Discovery Threat アプライアンスのソフトウェア上で稼働する Deep Discovery Inspector (DDI) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-2872 80097 CVE-2015-2872 24850 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004404.html 2015-08-18 2015-09-02 View