Scanmail (Trendmicro) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2021-03-03. Vendor: Trendmicro.

CVEs of Scanmail

• CVE-2021-25252 - CVSS 5.5 (medium), 2021-03-03: Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to…
• CVE-2019-14688 - CVSS 7 (high), 2020-02-20: Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack…
• CVE-2017-14092 - CVSS 8.8 (high), 2017-12-16: The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an…
• CVE-2017-14091 - CVSS 7.5 (high), 2017-12-16: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update…
• CVE-2017-14090 - CVSS 9.1 (critical), 2017-12-16: A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.
• CVE-2017-14093 - CVSS 6.1 (medium), 2017-12-16: The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks.