CVE-2018-6220: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems...

CVE-2018-6223: Missing Authentication for Critical Function

A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the registration process of the product to reset configuration parameters...

PT-2018-17419

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description The issue is related to an unvalidated software update vulnerability. This could allow a man-in-the-middle attacker to tamper with an update file and inject their own content...

PT-2018-17423

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description The issue is related to an XML external entity injection XXE vulnerability. This could allow an authenticated user to expose a normally protected configuration script. Recommendation...

PT-2018-17426

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description A SQL injection issue in the search configuration script could allow an attacker to execute SQL commands, potentially leading to the upload and execution of arbitrary code that may...

PT-2018-17424

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description A reflected cross-site scripting issue exists, allowing an attacker to inject client-side scripts into vulnerable systems through two configuration files. Recommendations For Trend...

PT-2018-17417

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description The issue allows an attacker to eavesdrop and tamper with certain types of update data due to an insecure update via HTTP. Recommendations For version 5.5, consider updating to a new...

PT-2018-17420

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5 Description The issue allows an attacker to change the location of log files, which can be manipulated to execute arbitrary commands, potentially leading to command execution on a vulnerable...

CVE-2018-6219: Improper Certificate Validation

An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with certain types of update data...

CVE-2018-6225: Improper Restriction of XML External Entity Reference

An XML external entity injection XXE vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script...

Trend Micro Email Encryption Gateway Arbitrary Command Execution Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An arbitrary command execution vulnerability exists in Trend Micro Email...

Trend Micro Email Encryption Gateway SQL Injection Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A SQL injection vulnerability exists in the policy script in Trend Micro Email...

Trend Micro Email Encryption Gateway Cross-Site Scripting Vulnerability (CNVD-2018-04491)

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A cross-site scripting vulnerability exists in the policy script in Trend Micro...

Trend Micro Email Encryption Gateway Information Disclosure Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An information disclosure vulnerability exists in Trend Micro Email Encryption...

Trend Micro Email Encryption Gateway Cross-Site Scripting Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A cross-site scripting vulnerability exists in the keymanserverconfig.jsp script...

Trend Micro Email Encryption Gateway Cross-Site Request Forgery Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A cross-site request forgery vulnerability exists in Trend Micro Email Encryptio...

Trend Micro Email Encryption Gateway XML External Entity Injection Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An XML external entity injection vulnerability exists in the configuration scrip...

Trend Micro Email Encryption Gateway SQL Injection Vulnerability (CNVD-2018-04494)

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A SQL injection vulnerability exists in the search configuration script in Trend...

Trend Micro Email Encryption Gateway Authentication Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An authentication vulnerability exists in Trend Micro Email Encryption Gateway 5...

Trend Micro Email Encryption Gateway Security Bypass Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. A security bypass vulnerability exists in Trend Micro Email Encryption Gateway 5...