Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:interscan_web_security_suite:3.1:*:*:*:*:*:*:*

part: a version: 3.1 update: *

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductInterscan Web Security Suite (23add998-8ae7-51b2-9c85-5b6e2fd0d543)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0613 vulnerable 2026-06-08 04:51:10.269176 Details available
Trend Micro InterScan Web Security Suite (IWSS) 3.1 before build 1237 allows remote authenticated Auditor and Report Only users to bypass intended permission settings, and modify the system configuration, via requests to unspecified JSP pages.
Published: 2009-02-17T17:00:00.000Z
Updated: 2024-08-07T04:40:05.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0612 vulnerable 2026-06-08 04:51:10.268079 Details available
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 3.x and InterScan Web Security Suite (IWSS) 3.x, when basic authorization is enabled on the standalone proxy, forwards the Proxy-Authorization header from Windows Media Player, which allows remote web servers to obtain credentials by offering a media stream and then capturing this header.
Published: 2009-02-17T17:00:00.000Z
Updated: 2024-08-07T04:40:05.116Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.