CVE-2020-8603: Trend Micro Interscan Web Security Virtual Appliance

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamper with the web interface of affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected products

• Trend Micro Interscan Web Security Virtual Appliance: version 6.5 only

Published 2020-05-27. Last modified 2026-06-17.