CVE-2018-10508

2018-06-1217:00:00

trendmicro

www.cve.org

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations. An attacker must already have at least guest privileges in order to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "11.0 SP1, XG"
      }
    ]
  }
]

References

success.trendmicro.com/solution/1119961