CVE-2020-27017: Trend Micro Interscan Messaging Security Virtual Appliance

Medium severity, CVSS 4.9. EPSS: 6.5% chance of exploitation in the next 30 days.

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow an authenticated administrator to read arbitrary local files. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.

Affected products

• Trend Micro Interscan Messaging Security Virtual Appliance: up to and including 9.1

Published 2020-11-09. Last modified 2026-06-17.