CVE-2020-27019
medium · 5.5Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker to access a specific database and key.
5.5
CVSS
17.9%
EPSS (exploit prob.)
97th
EPSS percentile
2020-11-09
Published
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-306
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| trendmicro | interscan_messaging_security_virtual_appliance | <= 9.1 |
| microsoft | windows | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/
- https://success.trendmicro.com/solution/000279833
- https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/
- https://success.trendmicro.com/solution/000279833
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-27019