CVE-2020-8465: Trend Micro Interscan Web Security Virtual Appliance

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate system updates using a combination of CSRF bypass (CVE-2020-8461) and authentication bypass (CVE-2020-8464) to execute code as user root.

Affected products

• Trend Micro Interscan Web Security Virtual Appliance: version 6.5 only

Published 2020-12-17. Last modified 2026-06-17.