Gateways and Deep Discovery
CVE-2024-36359: Cross-site scripting (XSS) in Trend Micro InterScan Web Security Virtual Appliance
A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trend Micro InterScan Web Security Virtual Appliance 6.5 | 6.5 Build 3334 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 could allow an attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.