The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager, related to authentication deficiencies, allow attackers to enhance their privileges.

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...

PT-2019-19680

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security Manager versions 10.x through 11.x Trend Micro Vulnerability Protection version 2.0 Description The issue allows for a XML External Entity Attack. However, the attack requires the attacker to have root or admin access...

CVE-2019-9488: Improper Restriction of XML External Entity Reference

Trend Micro Deep Security Manager 10.x, 11.x and Vulnerability Protection 2.0 are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager DSM...