Endpoint Encryption Policy Server (Trendmicro) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-06-17. Vendor: Trendmicro.

CVEs of Endpoint Encryption Policy Server

• CVE-2025-49213 - CVSS 9.8 (critical), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…
• CVE-2025-49216 - CVSS 9.8 (critical), 2025-06-17: An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and…
• CVE-2025-49215 - CVSS 8.8 (high), 2025-06-17: A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected…
• CVE-2025-49218 - CVSS 7.8 (high), 2025-06-17: A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected…
• CVE-2025-49214 - CVSS 8.8 (high), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on…
• CVE-2025-49217 - CVSS 9.8 (critical), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…
• CVE-2025-49212 - CVSS 9.8 (critical), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…
• CVE-2025-49211 - CVSS 7.8 (high), 2025-06-17: A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.…