Trend Micro, Inc. Trend Micro Moibile Security For Enterprise vulnerabilities

9 vulnerabilities

Known vulnerabilities in Trend Micro, Inc. Trend Micro Moibile Security For Enterprise, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2023-32523trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
2.57%
Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32524.
6.5CVE-2023-32525trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
2.04%
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32526.
8.8CVE-2023-32527trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
2.92%
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32528.
9.1CVE-2023-32521trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
66.81%
A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files.
6.5CVE-2023-32526trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
2.04%
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32525.
8.8CVE-2023-32528trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
2.99%
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32527.
8.8CVE-2023-32524trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
2.57%
Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32523.
8.1CVE-2023-32522trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
3.32%
A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
7.5CVE-2023-35695trend micro, inc.trend micro moibile security for enterprise+1
EPSS score
1.47%
A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product.