Medium severity6.1NVD Advisory· Published Jan 23, 2024· Updated Jun 17, 2026

CVE-2023-41178

Description

Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker.

Please note, this vulnerability is similar to, but not identical to, CVE-2023-41176.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trend Micro/Mobile Security2 versions
cpe:2.3:a:trendmicro:mobile_security:9.8:*:*:*:enterprise:*:*:*+ 1 more
- cpe:2.3:a:trendmicro:mobile_security:9.8:*:*:*:enterprise:*:*:*
- (no CPE)
Trend Micro/Mobile Security for Enterprisellm-fuzzy
Trend Micro, Inc./Trend Micro Mobile Security for Enterprisev5
Range: 9.8 SP5

Patches

Vulnerability mechanics

References

success.trendmicro.com/dcx/s/solution/000294695nvdVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-24-080/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000