Vulnerabilities > Trend Micro > Deep Discovery Inspector > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-06-30 CVE-2016-5840 Improper Input Validation vulnerability in Trend Micro Deep Discovery Inspector 3.7/3.81/3.82
hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header.
network
low complexity
trend-micro CWE-20
critical
 9.0
9.0