CVE-2023-41176

Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note, this vulnerability is similar to, but not identical to, CVE-2023-41177.

Score

CVSS 3.1 6.1 Medium

Status

Modified - security@trendmicro.com

Published

2024-01-23

Last modified

2025-06-20

Weaknesses

CWE-79

Affected products

• Trend Micro Mobile Security For Enterprise (Trend Micro Inc.)
• Mobile Security (Trendmicro)

References

• https://success.trendmicro.com/dcx/s/solution/000294695?language=en_US
• https://www.zerodayinitiative.com/advisories/ZDI-24-078/