CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14097

An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...

CVE-2017-14097

An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...

Design/Logic Flaw

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

Improper access control

An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14096

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

CVE-2017-11398

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system...

CVE-2017-14096

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

CVE-2017-11398

CVE-2017-11398 affects Trend Micro Smart Protection Server (Standalone)

CVE-2017-11398

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system...

CVE-2017-14096

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

CVE-2017-14095

CVE-2017-14095 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2/3.3 as per multiple sources. The vulnerability enables remote command execution via local file inclusion (LFI) in the web UI, with demonstrated attack vectors that include: session hijacking to obtain an act...

CVE-2017-14097

Trend Micro Smart Protection Server (Standalone)

CVE-2017-14097

An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...

CVE-2017-14094

CVE-2017-14094 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2. It enables remote command execution via cron job injection in the admin_update_program.php flow when updates are scheduled, due to unsanitized HTTP parameters used to build cron entries. The vulnerability i...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14096

CVE-2017-14096 corresponds to stored XSS in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below, with a broader set of vulnerabilities disclosed by Core Security (CORE-2017-0008) affecting the same product. Connected sources describe practical attack chains that an unauthentic...

CVE-2017-14095: Improper Control of Filename for Include/Require Statement in PHP Program

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system...

CVE-2017-14094: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...