VYPR
← All advisories
Critical severity9.9NVD Advisory· Published Feb 21, 2017· Updated Jun 17, 2026

CVE-2016-9269

CVE-2016-9269

Description

Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to run arbitrary commands on the system as root via Patch Update functionality. This was resolved in Version 6.5 CP 1737.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Trend Micro/Interscan Web Security Virtual Appliance2 versions
    cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:*:*:*:*:*:*:*:*range: <=6.5
    • (no CPE)range: <=6.5-SP2_Build_Linux_1707

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.