CVE-2016-1224

MEDIUM

Trend Micro Worry-Free Business Security CRLF Injection and XSS

Title source: llm
STIX 2.1

Description

CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.

References (3)

Core 3
Core References
Vendor Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN48847535/index.html
Third Party Advisory, VDB Entry, Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000089

Scores

CVSS v3 6.1
EPSS 0.0048
EPSS Percentile 65.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (2)
trendmicro/worry-free_business_security 9.0
trendmicro/worry-free_business_security_services 5.0
Published Jun 19, 2016
Tracked Since Feb 18, 2026