Control Manager (Trendmicro) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2021-03-03. Vendor: Trendmicro.
CVEs of Control Manager
- CVE-2021-25252 - CVSS 5.5 (medium), 2021-03-03: Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to…
- CVE-2019-14688 - CVSS 7 (high), 2020-02-20: Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack…
- CVE-2018-10511 - CVSS 10 (critical), 2018-08-15: A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on…
- CVE-2018-10510 - CVSS 9.8 (critical), 2018-08-15: A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary…
- CVE-2018-10512 - CVSS 7.5 (high), 2018-08-15: A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations,…
- CVE-2018-3606 - CVSS 8.8 (high), 2018-02-09: XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0…
- CVE-2018-3607 - CVSS 8.8 (high), 2018-02-09: XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute…
- CVE-2018-3600 - CVSS 6.5 (medium), 2018-02-09: A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive…
- CVE-2018-3603 - CVSS 8.8 (high), 2018-02-09: A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary…
- CVE-2018-3602 - CVSS 8.8 (high), 2018-02-09: An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute…
- CVE-2018-3605 - CVSS 8.8 (high), 2018-02-09: TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote…
- CVE-2018-3601 - CVSS 9.8 (critical), 2018-02-09: A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on…
- CVE-2018-3604 - CVSS 8.8 (high), 2018-02-09: GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary…
- CVE-2016-6220 - CVSS 7.5 (high), 2017-08-07: Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0.
- CVE-2017-11385 - CVSS 9.8 (critical), 2017-08-02: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in…
- CVE-2017-11388 - CVSS 8.8 (high), 2017-08-02: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided…
- CVE-2017-11384 - CVSS 9.8 (critical), 2017-08-02: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in…
- CVE-2017-11387 - CVSS 7.5 (high), 2017-08-02: Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can…
- CVE-2017-11390 - CVSS 7.5 (high), 2017-08-02: XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly…
- CVE-2017-11383 - CVSS 9.8 (critical), 2017-08-02: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in…
- CVE-2017-11386 - CVSS 9.8 (critical), 2017-08-02: SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in…
- CVE-2017-11389 - CVSS 9.8 (critical), 2017-08-02: Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing…
