CVE-2015-2872: Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep D...

Security readout for executives and security teams

This CVE describes multiple cross-site scripting flaws in Trend Micro Deep Discovery Inspector appliances. An attacker could inject script or HTML through certain web interface inputs. The sources identify vulnerable software branches and fixed version thresholds, but provide no CVSS score or confirmed active exploitation. Exposure is likely limited to organizations running Trend Micro Deep Discovery Inspector or Deep Discovery Threat appliances on the listed older software versions. Risk increases if the management interface is reachable by untrusted users or broad internal networks. Treat this as a targeted remediation item for security infrastructure, not a general internet-wide emergency. Prioritize inventory and upgrade confirmation because vulnerable security appliances can become a foothold for credential theft or administrator session abuse. Mitigation focus: Identify all Trend Micro DDI and Deep Discovery Threat appliances.; Compare installed versions with the fixed thresholds listed for each branch.; Check Trend Micro advisory 1112206 for supported upgrade guidance..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.