CVE-2020-27017

PoC ×2—

CVSS 3.1

4.9 medium

EPSS

6%p93

Published

Nov 9, 2020 (Nov 9, 2020)

Modified

Jun 17, 2026

Description

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an XML External Entity Processing (XXE) vulnerability which could allow an authenticated administrator to read arbitrary local files. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.

Vendors: trendmicro
Products: interscan messaging security virtual appliance
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (6.5%)

In the news0 stories

No ingested article mentions this CVE yet.