Trend Micro vulnerabilities, page 4
419 vulnerabilities
Known vulnerabilities in Trend Micro products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 128 products.
HighCVE-2018-3603trend micro · trend micro control manager +1 moretrend micro trend micro control managerA CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.EPSS8.12%CriticalCVE-2018-3601trend micro · trend micro control manager +1 moretrend micro trend micro control managerA password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations.EPSS4.23%HighCVE-2018-3604trend micro · trend micro control manager +1 moretrend micro trend micro control managerGetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.EPSS67.85%MediumCVE-2003-1342trend_micro · virus_control_systemtrend_micro virus_control_systemTrend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memory consumption) in IIS via multiple URL requests for ActiveSupport.exe.EPSS3.38%HighCVE-2003-1341trend_micro · officescan +1 moretrend_micro officescanThe default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.EPSS7.66%HighCVE-2003-1343trend_micro · scanmailtrend_micro scanmailTrend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".EPSS2.62%HighCVE-2003-0646trend_micro · damage_cleanup_server +1 moretrend_micro damage_cleanup_serverMultiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings.EPSS2.63%HighCVE-2021-42103trend micro · trend micro apex one +1 moretrend micro trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar but not identical to CVE-2021-42101.EPSS0.46%HighCVE-2021-42106trend micro · trend micro apex one +4 moretrend micro trend micro apex oneUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42105 and 42107.EPSS0.38%HighCVE-2021-42102trend micro · trend micro apex one +1 moretrend micro trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service agents could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.46%HighCVE-2021-42011trend micro · trend micro apex one +1 moretrend micro trend micro apex oneAn incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.35%HighCVE-2021-42012trend micro · trend micro apex one +4 moretrend micro trend micro apex oneA stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.58%HighCVE-2021-42101trend micro · trend micro apex one +1 moretrend micro trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar but not identical to CVE-2021-42103.EPSS0.46%HighCVE-2021-42108trend micro · trend micro apex one +4 moretrend micro trend micro apex oneUnnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.41%HighCVE-2021-42107trend micro · trend micro apex one +4 moretrend micro trend micro apex oneUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42105 and 42106.EPSS0.38%HighCVE-2021-42105trend micro · trend micro apex one +4 moretrend micro trend micro apex oneUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42106 and 42107.EPSS0.38%HighCVE-2021-42104trend micro · trend micro apex one +4 moretrend micro trend micro apex oneUnnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42105, 42106 and 42107.EPSS0.38%HighCVE-2021-31520trend micro · trend micro im security +1 moretrend micro trend micro im securityA weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface.EPSS3.90%HighCVE-2021-31519trend micro · trend micro housecall for home networks +1 moretrend micro trend micro housecall for home networksAn incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.EPSS0.35%HighCVE-2021-31518trend micro · trend micro home network security +1 moretrend micro trend micro home network securityTrend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31517.EPSS1.10%