CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.
References
| Link | Resource |
|---|---|
| http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx | Vendor Advisory |
| http://jvn.jp/en/jp/JVN48847535/index.html | Vendor Advisory |
| http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089 | Third Party Advisory VDB Entry Vendor Advisory |
| http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx | Vendor Advisory |
| http://jvn.jp/en/jp/JVN48847535/index.html | Vendor Advisory |
| http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089 | Third Party Advisory VDB Entry Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx - Vendor Advisory | |
| References | () http://jvn.jp/en/jp/JVN48847535/index.html - Vendor Advisory | |
| References | () http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089 - Third Party Advisory, VDB Entry, Vendor Advisory |
Information
Published : 2016-06-19 01:59
Updated : 2024-11-21 02:45
NVD link : CVE-2016-1224
Mitre link : CVE-2016-1224
CVE.ORG link : CVE-2016-1224
JSON object : View
Products Affected
trendmicro
- worry-free_business_security
- worry-free_business_security_services
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')