CVE-2017-14094

🗓️ 19 Jan 2018 19:00:00Reported by trendmicroType

A vulnerability in Trend Micro Smart Protection Serve

Reporter	Title	Published	Views	Family All 9
0day.today	Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities	22 Dec 201700:00	–	zdt
CNVD	Trend Micro Smart Protection Server Remote Command Execution Vulnerability	22 Dec 201700:00	–	cnvd
Core Security	Trend Micro Smart Protection Server Multiple Vulnerabilities	19 Dec 201700:00	–	coresecurity
Cvelist	CVE-2017-14094	19 Jan 201819:00	–	cvelist
Exploit DB	Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control	19 Dec 201700:00	–	exploitdb
exploitpack	Trend Micro Smart Protection Server - Session Hijacking Log File Disclosure Remote Command Execution Cron Job Injection Local File Inclusion Stored Cross-Site Scripting Improper Access Control	19 Dec 201700:00	–	exploitpack
NVD	CVE-2017-14094	19 Jan 201819:29	–	nvd
Packet Storm	Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure	22 Dec 201700:00	–	packetstorm
Prion	Design/Logic Flaw	19 Jan 201819:29	–	prion

NVD

Node

trendmicro smart_protection_serverRange≤3.2

[
  {
    "product": "Trend Micro Smart Protection Server (Standalone)",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "3.0, 3.1, 3.2"
      }
    ]
  }
]

Source	Link
coresecurity	www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
securityfocus	www.securityfocus.com/bid/102275
success	www.success.trendmicro.com/solution/1118992
exploit-db	www.exploit-db.com/exploits/43388/

21 Nov 2024 03:12Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 39.8

EPSS0.56266