Browse CVEs

HIGH 8.1 CVE-2017-14095EPSS 12% A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command executio… Smart Protection Server after 3.2 Fix from $1,9502018-01-19 HIGH 7.5 CVE-2017-14082 An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unaut… Mobile Security after 9.7 Fix from $1,9502018-01-19 MEDIUM 6.1 CVE-2017-14096 A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker … Smart Protection Server after 3.2 Fix from $1,6002018-01-19 CRITICAL 9.1 CVE-2017-14090 A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted. Scanmail Patch available Fix from $2,3002017-12-16 HIGH 8.8 CVE-2017-14092 The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated request… Scanmail Patch available Fix from $1,9502017-12-16 HIGH 7.5 CVE-2017-14091 A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Upda… Scanmail Patch available Fix from $1,9502017-12-16 MEDIUM 6.1 CVE-2017-14093 The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks. Scanmail Patch available Fix from $1,6002017-12-16 HIGH 7.8 CVE-2017-11397 A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to e… Encryption For Email after 5.6.0.1073 Fix from $1,9502017-12-16 CRITICAL 9.8 CVE-2017-14089EPSS 10% An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the Offic… Officescan Patch available Fix from $2,3002017-10-06 HIGH 7.5 CVE-2017-14087EPSS 8% A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attac… Officescan No fix yet Fix from $1,9502017-10-06 HIGH 7.0 CVE-2017-14088 Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and esc… Officescan Patch available Fix from $1,9502017-10-06 HIGH 8.1 CVE-2017-14084EPSS 10% A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vuln… Officescan Patch available Fix from $1,9502017-10-06 HIGH 7.5 CVE-2017-14083EPSS 6% A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryp… Officescan Patch available Fix from $1,9502017-10-06 HIGH 7.5 CVE-2017-14086EPSS 8% Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the Offic… Officescan Patch available Fix from $1,9502017-10-06 MEDIUM 5.3 CVE-2017-14085EPSS 6% Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to … Officescan Patch available Fix from $1,6002017-10-06 CRITICAL 9.8 CVE-2017-14078EPSS 50% SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary cod… Mobile Security Patch available Fix from $2,3002017-09-22 CRITICAL 9.8 CVE-2017-14080 Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific par… Mobile Security Patch available Fix from $2,3002017-09-22 HIGH 8.8 CVE-2017-11395EPSS 14% Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authen… Smart Protection Server Patch available Fix from $1,9502017-09-22 HIGH 8.8 CVE-2017-14079EPSS 11% Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on… Mobile Security Patch available Fix from $1,9502017-09-22 HIGH 8.8 CVE-2017-14081EPSS 17% Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arb… Mobile Security after 9.7 Fix from $1,9502017-09-22 HIGH 7.2 CVE-2017-11396 Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attack… Interscan Web Security Virtual Appliance Patch available Fix from $1,9502017-09-22 HIGH 7.5 CVE-2016-6220 Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0. Control Manager Patch available Fix from $1,9502017-08-07 CRITICAL 9.8 CVE-2017-11393EPSS 16% Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable instal… Officescan Patch available Fix from $2,3002017-08-03 CRITICAL 9.8 CVE-2017-11394EPSS 67% Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable instal… Officescan Patch available Fix from $2,3002017-08-03 HIGH 8.8 CVE-2017-11391EPSS 62% Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary c… Interscan Messaging Security Virtual Appliance Mitigation only Fix from $1,9502017-08-03 HIGH 8.8 CVE-2017-11392EPSS 34% Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary c… Interscan Messaging Security Virtual Appliance Mitigation only Fix from $1,9502017-08-03 HIGH 7.5 CVE-2017-11382 Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable i… Deep Discovery Email Inspector Patch available Fix from $1,9502017-08-03 CRITICAL 9.8 CVE-2017-11383EPSS 39% SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validatio… Control Manager Patch available Fix from $2,3002017-08-02 CRITICAL 9.8 CVE-2017-11384EPSS 39% SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validatio… Control Manager Patch available Fix from $2,3002017-08-02 CRITICAL 9.8 CVE-2017-11385EPSS 39% SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validatio… Control Manager Patch available Fix from $2,3002017-08-02