trendmicro email encryption gateway 5.5 vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an malicious user to inject arbitrary data, which may lead to gaining code execution on vulnerable systems.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

9.8

CVSSv3

A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an malicious user to manipulate the registration process of the product to reset configuration parameters.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

4.3

CVSSv3

An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

6.8

CVSSv3

A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an malicious user to execute SQL commands to upload and execute arbitrary code that may harm the target system.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

8.1

CVSSv3

An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle malicious user to tamper with an update file and inject their own.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

5.4

CVSSv3

Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an malicious user to inject client-side scripts into vulnerable systems.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

6.5

CVSSv3

An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an malicious user to eavesdrop and tamper with certain types of update data.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

7.8

CVSSv3

Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an malicious user to change location of log files and be manipulated to execute arbitrary commands and attain command execution on a vulnerable system.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

8.8

CVSSv3

A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an malicious user to submit authenticated requests to a user browsing an attacker-controlled domain.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

5.4

CVSSv3

A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an malicious user to inject client-side scripts into vulnerable systems.

Trendmicro Email Encryption Gateway 5.5

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook