Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server vulnerabilities
8 vulnerabilities
Known vulnerabilities in Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-49211trend micro, inc.trend micro endpoint encryption policy server+1
EPSS score0.13%
A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.CVE-2025-49212trend micro, inc.trend micro endpoint encryption policy server+1EPSS score13.27%
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.CVE-2025-49215trend micro, inc.trend micro endpoint encryption policy server+1EPSS score0.33%
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.CVE-2025-49216trend micro, inc.trend micro endpoint encryption policy server+1EPSS score0.55%
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.CVE-2025-49214trend micro, inc.trend micro endpoint encryption policy server+1EPSS score0.84%
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.CVE-2025-49218trend micro, inc.trend micro endpoint encryption policy server+1EPSS score0.13%
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.CVE-2025-49217trend micro, inc.trend micro endpoint encryption policy server+1EPSS score1.09%
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method.CVE-2025-49213trend micro, inc.trend micro endpoint encryption policy server+1EPSS score13.27%
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method.