Vulnerabilities > Trendmicro > High

DATE CVE VULNERABILITY TITLE RISK
2018-05-23 CVE-2018-10357 Path Traversal vulnerability in Trendmicro Endpoint Application Control 2.0
A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet.
network
low complexity
trendmicro CWE-22
8.8
2018-05-23 CVE-2018-10356 SQL Injection vulnerability in Trendmicro Email Encryption Gateway 5.5
A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class.
network
low complexity
trendmicro CWE-89
8.8
2018-05-23 CVE-2018-10355 Insufficiently Protected Credentials vulnerability in Trendmicro Email Encryption Gateway 5.5
An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class.
local
high complexity
trendmicro CWE-522
7.0
2018-05-23 CVE-2018-10354 OS Command Injection vulnerability in Trendmicro Email Encryption Gateway 5.5
A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the LauncherServer.
network
low complexity
trendmicro CWE-78
8.8
2018-05-23 CVE-2018-10352 SQL Injection vulnerability in Trendmicro Email Encryption Gateway 5.5
A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formConfiguration class.
network
low complexity
trendmicro CWE-89
8.8
2018-05-23 CVE-2018-10351 SQL Injection vulnerability in Trendmicro Email Encryption Gateway 5.5
A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRegistration2 class.
network
low complexity
trendmicro CWE-89
8.8
2018-03-15 CVE-2018-6224 Cross-Site Request Forgery (CSRF) vulnerability in Trendmicro Email Encryption Gateway 5.5
A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticated requests to a user browsing an attacker-controlled domain.
network
low complexity
trendmicro CWE-352
8.8
2018-03-15 CVE-2018-6222 OS Command Injection vulnerability in Trendmicro Email Encryption Gateway 5.5
Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute arbitrary commands and attain command execution on a vulnerable system.
local
low complexity
trendmicro CWE-78
7.8
2018-03-15 CVE-2018-6221 Improper Certificate Validation vulnerability in Trendmicro Email Encryption Gateway 5.5
An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to tamper with an update file and inject their own.
network
high complexity
trendmicro CWE-295
8.1
2018-02-16 CVE-2018-6218 Untrusted Search Path vulnerability in Trendmicro products
A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.
local
high complexity
trendmicro CWE-426
7.0