Trendmicro Smart_protection_server
13 CVEs affecting Trendmicro Smart_protection_server. Latest disclosed: 2018-05-25. Critical: 4, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6231 | Critical | 9.8 | 2018-03-15 | A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remo… |
CVE-2017-14097 | Critical | 9.8 | 2018-01-19 | An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents… |
CVE-2017-14094 | Critical | 9.8 | 2018-01-19 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cr… |
CVE-2016-6269 | Critical | 9.1 | 2017-01-30 | Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 all… |
CVE-2018-10350 | High | 8.8 | 2018-05-25 | A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary… |
CVE-2017-11398 | High | 8.8 | 2018-01-19 | A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated… |
CVE-2017-11395 | High | 8.8 | 2017-09-22 | Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated ac… |
CVE-2016-6267 | High | 8.8 | 2017-01-30 | SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to e… |
CVE-2016-6266 | High | 8.8 | 2017-01-30 | ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated… |
CVE-2017-14095 | High | 8.1 | 2018-01-19 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a lo… |
CVE-2016-6268 | High | 7.8 | 2017-01-30 | Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary cod… |
CVE-2018-6237 | High | 7.5 | 2018-05-25 | A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to manipulate the product to send a larg… |
CVE-2017-14096 | Medium | 6.1 | 2018-01-19 | A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute… |