CVE-2016-9315

8.8 highEPSS 9.0%

High (8.8) in trendmicro interscan web security virtual appliance. EPSS 9.0% chance of exploitation in the next 30 days.

Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to change Master Admin's password and/or add new admin accounts. This was resolved in Version 6.5 CP 1737.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.0% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2017-02-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:interscan_web_security_virtual_appliance

References

http://www.securityfocus.com/bid/96252
http://www.securitytracker.com/id/1037849
https://success.trendmicro.com/solution/1116672
http://www.securityfocus.com/bid/96252
http://www.securitytracker.com/id/1037849

Check your stack JSON