CVE-2017-7896

EPSS 4.3%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 4.3%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

18 Apr 2017Published on NVD

07 Oct 2017Metasploit module available

Weaponization speed

171 daysto Metasploit module

Recommendation: Plan a near-term fix — a public PoC already exists.

Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

Affected products

References