CVE-2017-14087

HIGH 7.5CVE-2017-14087 · Published 06/10/2017 · updated 17/06/2026

In short

CVE-2017-14087 is a HIGH (CVSS 7.5) vulnerability affecting officescan (trendmicro).
Chance of exploitation in the next 30 days (EPSS): 8.3%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
officescan trendmicro	`= 11.0= 12.0`	No fix yet

Description

A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.

References

hyp3rlinx.altervista.org/advisories/CVE-2017-14087-TRENDMICRO-OFFICESCAN-XG-HOST-HEADER-INJECTION.txt · Exploit
packetstormsecurity.com/files/144404/TrendMicro-OfficeScan-11.0-XG-12.0-Host-Header-Injection.html · Exploit
seclists.org/fulldisclosure/2017/Sep/86 · Exploit
securityfocus.com/archive/1/541267/100/0/threaded
securityfocus.com/bid/101074 · Third Party Advisory
securitytracker.com/id/1039500 · Third Party Advisory
success.trendmicro.com/solution/1118372 · Mitigation
exploit-db.com/exploits/42895 · Exploit

More vulnerabilities in officescan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

officescan

trendmicro

= 11.0= 12.0

No fix yet

More vulnerabilities in officescan

See all →