CVE-2016-1226

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.1MEDIUM

EPSS

0.4%

top 41.10%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Trendmicro Internet Security

Timeline

PublishedJun 19

Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDtrendmicro/internet_security10.0, 8.0+1

🔴Vulnerability Details

GHSA

GHSA-ccf2-wq32-c23f: Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via↗2022-05-17

▶

CVEList

CVE-2016-1226: Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or HTML via↗2016-06-19

▶