CVE-2020-27016

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify policy rules by tricking an authenticated administrator into accessing an attacker-controlled web page. An attacker must already have obtained product administrator/root privileges to exploit this vulnerability.

• CWE-352

• https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/Exploit, Third Party Advisory
• https://success.trendmicro.com/solution/000279833Exploit, Vendor Advisory
• https://sec-consult.com/en/blog/advisories/vulnerabilities-in-trend-micro-interscan-messaging-security-virtual-appliance-imsva/Exploit, Third Party Advisory
• https://success.trendmicro.com/solution/000279833Exploit, Vendor Advisory

Published

Nov 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27009A vulnerability has been identified in APOGEE PXC Compact (B…8.1
• CVE-2020-2701Vulnerability in the Oracle VM VirtualBox product of Oracle …7.5
• CVE-2020-27010A cross-site scripting (XSS) vulnerability in Trend Micro In…4.8
• CVE-2020-27013Trend Micro Antivirus for Mac 2020 (Consumer) contains a vul…4.4
• CVE-2020-27014Trend Micro Antivirus for Mac 2020 (Consumer) contains a rac…6.4
• CVE-2020-27015Trend Micro Antivirus for Mac 2020 (Consumer) contains an Er…4.4
• CVE-2020-27017Trend Micro InterScan Messaging Security Virtual Appliance (…4.9
• CVE-2020-27018Trend Micro InterScan Messaging Security Virtual Appliance (…5.5
• CVE-2020-27019Trend Micro InterScan Messaging Security Virtual Appliance (…5.5
• CVE-2020-2702Vulnerability in the Oracle VM VirtualBox product of Oracle …7.5
• CVE-2020-27020Password generator feature in Kaspersky Password Manager was…7.5
• CVE-2020-27021In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a …4.4