CVE-2019-9488
Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).
- Score
- CVSS 3.1 4.9 Medium
- Status
- Modified - security@trendmicro.com
- Published
- 2019-09-11
- Last modified
- 2024-08-04
- Weaknesses
- CWE-611
Affected products
- Trend Micro Deep Security (Trend Micro)
- Trend Micro Vulnerability Protection (Trend Micro)
- Deep Security Manager (Trendmicro)
- Vulnerability Protection (Trendmicro)
References
- https://success.trendmicro.com/solution/1122900
