Trend Micro Deep Security Agent For Linux vulnerabilities

2 vulnerabilities

Known vulnerabilities in Trend Micro Deep Security Agent For Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2022-23120trend microtrend micro deep security agent for linux+1
EPSS score
6.38%
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.7.5CVE-2022-23119trend microtrend micro deep security agent for linux+1
EPSS score
22.25%
A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the target Deep Security Manager (DSM) or the target agent must be not yet activated or configured in order to exploit this vulnerability.