### [CVE-2017-14093](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14093) ![](https://img.shields.io/static/v1?label=Product&message=Trend%20Micro%20ScanMail%20for%20Exchange&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross%20Site%20Scripting%20(XSS)&color=brighgreen) ### Description The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks. ### POC #### Reference - https://www.coresecurity.com/advisories/trend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities #### Github - https://github.com/lean0x2F/lean0x2f.github.io