CVE-2017-14096

MEDIUM 6.1CVE-2017-14096 · Published 19/01/2018 · updated 17/06/2026

In short

CVE-2017-14096 is a MEDIUM (CVSS 6.1) vulnerability affecting smart protection server (trendmicro).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
smart protection server trendmicro	`≤ 3.2`	No fix yet

Description

A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems.

References

securityfocus.com/bid/102275 · Third Party Advisory
success.trendmicro.com/solution/1118992 · Vendor Advisory
coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities · Exploit
exploit-db.com/exploits/43388 · Third Party Advisory

More vulnerabilities in smart protection server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

smart protection server

trendmicro

≤ 3.2

No fix yet

More vulnerabilities in smart protection server

See all →