CVE-2020-8461: Trend Micro Interscan Web Security Virtual Appliance

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token.

Affected products

• Trend Micro Interscan Web Security Virtual Appliance: version 6.5 only

Published 2020-12-17. Last modified 2026-06-17.