deep discovery inspector vulnerabilities and fixes

Recent CVEs affecting deep discovery inspector, with upgrade or downgrade steps. 4 tracked.

Also searched as: deepdiscoveryinspector.

deep discovery inspector has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-09-28. Highest priority: CVE-2016-5840 (score 54/100).

• CVE-2018-15365 MEDIUM 5.4 UPGRADE A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below co
• CVE-2016-5840 HIGH 7.2 DOWNGRADE hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows
• CVE-2015-2873 MEDIUM 5.5 DOWNGRADE Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477,
• CVE-2015-2872 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Disc

FAQ

How do I fix deep discovery inspector vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is deep discovery inspector being exploited right now?

None of the tracked deep discovery inspector CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which deep discovery inspector CVE should I patch first?

CVE-2016-5840 currently ranks highest (54/100): hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows.

RSS feed for deep discovery inspector · ← Back to latest CVEs