Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
trendmicro control manager 6.0 vulnerabilities and exploits
(subscribe to this query)
10
CVSSv3
CVE-2018-10511
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an malicious user to conduct a server-side request forgery (SSRF) attack on vulnerable installations.
Trendmicro Control Manager 6.0
Trendmicro Control Manager 7.0
8.8
CVSSv3
CVE-2018-3602
An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote malicious user to execute arbitrary code on vulnerable installations.
Trendmicro Control Manager 6.0
6.5
CVSSv3
CVE-2018-3600
A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote malicious user to disclose sensitive information on vulnerable installations.
Trendmicro Control Manager 6.0
9.8
CVSSv3
CVE-2018-3601
A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote malicious user to bypass authentication on vulnerable installations.
Trendmicro Control Manager 6.0
8.8
CVSSv3
CVE-2018-3604
GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote malicious user to execute arbitrary code on vulnerable installations.
Trendmicro Control Manager 6.0
8.8
CVSSv3
CVE-2018-3605
TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote malicious user to execute arbitrary code on vulnerable installations.
Trendmicro Control Manager 6.0
8.8
CVSSv3
CVE-2018-3606
XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote malicious user to execute arbitrary code on vulnerable installations.
Trendmicro Control Manager 6.0
8.8
CVSSv3
CVE-2018-3607
XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote malicious user to execute arbitrary code on vulnerable installations.
Trendmicro Control Manager 6.0
9.8
CVSSv3
CVE-2017-11383
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560.
Trendmicro Control Manager 6.0
9.8
CVSSv3
CVE-2017-11384
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dll. Formerly ZDI-CAN-4561.
Trendmicro Control Manager 6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761
command injection
CVE-2024-3676
IDOR
CVE-2024-30039
CVE-2024-32113
CVE-2024-30049
CVE-2024-4776
SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »