Unrated severityNVD Advisory· Published Sep 17, 2012· Updated Jun 16, 2026
CVE-2012-2995
CVE-2012-2995
Description
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or HTML via (1) the wrsApprovedURL parameter to addRuleAttrWrsApproveUrl.imss or (2) the src parameter to initUpdSchPage.imss.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:trendmicro:interscan_messaging_security_suite:7.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:trendmicro:interscan_messaging_security_suite:7.1:*:*:*:*:*:*:*
- (no CPE)range: 7.1-Build_Win32_1394
Patches
Vulnerability mechanics
References
3- www.kb.cert.org/vuls/id/471364nvdUS Government Resource
- secunia.com/advisories/50620nvd
- www.securitytracker.com/idnvd
News mentions
0No linked articles in our index yet.