High severity8.8NVD Advisory· Published Dec 17, 2020· Updated Jun 17, 2026
CVE-2020-8461
CVE-2020-8461
Description
A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:sp2:*:*:*:*:*:*
- (no CPE)range: 6.5 SP2
- (no CPE)range: 6.5 SP2
Patches
Vulnerability mechanics
References
2- sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/nvdExploitThird Party Advisory
- success.trendmicro.com/solution/000283077nvdVendor Advisory
News mentions
0No linked articles in our index yet.