PT-2018-5619

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system. Recommendations: For versions 3....

CVE-2017-11398: Improper Authorization

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system...

CVE-2017-14096: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

PT-2018-5620

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A stored cross site scripting XSS issue could allow an attacker to execute a malicious payload on vulnerable systems. Recommendations: For versions 3.2 and...

CVE-2017-14094: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14097: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...

PT-2018-5618

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: A vulnerability could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system. Recommendations: For versions 3.2...

PT-2018-5621

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: An issue exists where improper access control could allow an attacker to decrypt database contents, potentially accessing a vulnerable system. Recommendations:...

Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure

Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date published: 2017-12-19 Date of last update: 2017-12-11...

Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure Vulnerabilities

Exploit for multiple platform in category remote exploits 1. Advisory Information Title: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities Date...

Trend Micro Smart Protection Server Remote Command Execution Vulnerability (CNVD-2018-01119)

Trend Micro Smart Protection Server is the next generation of cloud-based advanced protection solutions. A remote command execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to remotely execute arbitrary commands via local file inclusio...

Trend Micro Smart Protection Server Local Information Disclosure Vulnerability

Trend Micro Smart Protection Server is the next generation of cloud-based advanced protection solutions. A local information disclosure vulnerability exists in Trend Micro Smart Protection Server. An attacker could exploit the vulnerability to obtain sensitive information via log files...

Trend Micro Smart Protection Server Remote Command Execution Vulnerability

Trend Micro Smart Protection Server is the next generation of cloud-based advanced protection solutions. A remote command execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to remotely execute arbitrary commands via timed job injection...

Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting / Improper Access Control

Trend Micro Smart Protection Server Multiple Vulnerabilities 1. Advisory Information Title:: Trend Micro Smart Protection Server Multiple Vulnerabilities Advisory ID: CORE-2017-0008 Advisory URL: http://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities...

Trend Micro Smart Protection Server Command Injection Vulnerability

Trend Micro Smart Protection Server is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Trend Micro Smart Protection Server Detection (HTTP)

Detection of Trend Micro Smart Protection Server. This script performs a HTTP based detection of Trend Micro Smart Protection Server. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-11395

Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...

Command injection

Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...

CVE-2017-11395

Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...

CVE-2017-11395

Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...