Email Encryption Gateway (Trendmicro) - vulnerabilities (CVEs)

19 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2018-05-23. Vendor: Trendmicro.

CVEs of Email Encryption Gateway

CVE-2018-10356 - CVSS 8.8 (high), 2018-05-23: A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on…
CVE-2018-10352 - CVSS 8.8 (high), 2018-05-23: A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due…
CVE-2018-10355 - CVSS 7 (high), 2018-05-23: An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable…
CVE-2018-10351 - CVSS 8.8 (high), 2018-05-23: A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due…
CVE-2018-10354 - CVSS 8.8 (high), 2018-05-23: A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code…
CVE-2018-10353 - CVSS 6.5 (medium), 2018-05-23: A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive…
CVE-2018-6226 - CVSS 5.4 (medium), 2018-03-15: Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject…
CVE-2018-6229 - CVSS 9.8 (critical), 2018-03-15: A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and…
CVE-2018-6228 - CVSS 9.8 (critical), 2018-03-15: A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and…
CVE-2018-6227 - CVSS 5.4 (medium), 2018-03-15: A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side scripts into…
CVE-2018-6230 - CVSS 6.8 (medium), 2018-03-15: A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to…
CVE-2018-6220 - CVSS 9.8 (critical), 2018-03-15: An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining…
CVE-2018-6223 - CVSS 9.8 (critical), 2018-03-15: A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the…
CVE-2018-6219 - CVSS 6.5 (medium), 2018-03-15: An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with certain types of…
CVE-2018-6222 - CVSS 7.8 (high), 2018-03-15: Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute…
CVE-2018-6225 - CVSS 4.3 (medium), 2018-03-15: An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally…
CVE-2018-6221 - CVSS 8.1 (high), 2018-03-15: An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to tamper with an update…
CVE-2018-6224 - CVSS 8.8 (high), 2018-03-15: A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit…
CVE-2016-4351 - CVSS 9.8 (critical), 2016-05-05: SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers…