CVE-2018-6224

2018-03-1519:00:00

trendmicro

www.cve.org

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to submit authenticated requests to a user browsing an attacker-controlled domain.

CNA Affected

[
  {
    "product": "Trend Micro Email Encryption Gateway",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "5.5"
      }
    ]
  }
]