Advisories · Technology
Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server.
Every CVE that names Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
SQL injection in Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected…
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 8.8 High
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-242
- CVSS 8.8 High
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 7.7 High
SQL injection in Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- SQL injection