CVE-2024-36359: Trend Micro Interscan Web Security Virtual Appliance

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

• Trend Micro Interscan Web Security Virtual Appliance: version 6.5 only

Published 2024-06-10. Last modified 2026-06-17.