Trend Micro Endpoint Encryption (Trendmicro) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-06-17. Vendor: Trendmicro.

CVEs of Trend Micro Endpoint Encryption

CVE-2025-49215 - CVSS 8.8 (high), 2025-06-17: A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected…
CVE-2025-49218 - CVSS 7.8 (high), 2025-06-17: A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected…
CVE-2025-49214 - CVSS 8.8 (high), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on…
CVE-2025-49217 - CVSS 9.8 (critical), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…
CVE-2025-49213 - CVSS 9.8 (critical), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…
CVE-2025-49216 - CVSS 9.8 (critical), 2025-06-17: An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and…
CVE-2025-49212 - CVSS 9.8 (critical), 2025-06-17: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected…
CVE-2025-49211 - CVSS 7.8 (high), 2025-06-17: A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.…
CVE-2023-28005 - CVSS 6.8 (medium), 2023-03-22: A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an…