213 matches found
PT-2018-9934
Name of the Vulnerable Software and Affected Versions: Trend Micro Control Manager versions 6.0 through 7.0 Description: A vulnerability could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, potentially leading to a denial of server DoS. Recommendations: For...
PT-2018-9933
Name of the Vulnerable Software and Affected Versions: Trend Micro Control Manager versions 6.0 and 7.0 Description: A vulnerability could allow an attacker to conduct a server-side request forgery SSRF attack on vulnerable installations. Recommendations: For versions 6.0 and 7.0, update to a...
PT-2018-9932
Name of the Vulnerable Software and Affected Versions: Trend Micro Control Manager versions 6.0 through 7.0 Description: A Directory Traversal Remote Code Execution issue could allow an attacker to execute arbitrary code on vulnerable installations. Recommendations: For versions 6.0 through 7.0,...
Trend Micro Control Manager GetPassword() SQLi
The Trend Micro Control Manager running on the remote host is affected by an SQLi vulnerability when processing an HTTP request due to the lack of proper validation of a user-supplied string before using it to construct SQL queries. An unauthenticated, remote attacker can exploit this issue, via ...
Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03781)
Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A CGGIServlet SQL injection remote cod...
CVE-2018-3607
XXXTreeNode method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
CVE-2018-3606
XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
CVE-2018-3606
XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
CVE-2018-3604
GetXXX method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
CVE-2018-3600
A external entity processing information disclosure XXE vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations...
Sql injection
An AdHocQueryProcessor SQL injection remote code execution RCE vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
Sql injection
XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
Xxe
A external entity processing information disclosure XXE vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations...
Sql injection
A CGGIServlet SQL injection remote code execution RCE vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
Sql injection
GetXXX method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
CVE-2018-3605
TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...
CVE-2018-3602
The CVE-2018-3602 issue affects Trend Micro Control Manager 6.0 via an AdHocQuery_Processor SQL Injection that enables remote code execution. The root cause is improper validation of a user-supplied string used to build SQL queries within the GetProductCategory method of the AdHocQuery_Processor ...
CVE-2018-3603
Trend Micro Control Manager 6.0 contains a CGGIServlet SQL injection that allows remote code execution. The ZDI advisory specifies the vulnerability in the ID_QUERY_COMMAND_TRACKING_USER_ID parameter, where improper input validation enables arbitrary code execution under the Network Service accou...
CVE-2018-3600
A external entity processing information disclosure XXE vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations...