CVE-2018-10512

A vulnerability in Trend Micro Control Manager versions 6.0 and 7.0 could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, which may lead to a denial of server DoS...

CVE-2018-10510

A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager versions 6.0 and 7.0 could allow an attacker to execute arbitrary code on vulnerable installations...

CVE-2018-10510

A directory traversal vulnerability exists in Trend Micro Control Manager (TMCM) versions 6.0 and 7.0 that could allow a remote attacker to execute arbitrary code on vulnerable installations (remote code execution). The CNVD record confirms the affected product and impact; no remediation details ...

CVE-2018-10511: Server-Side Request Forgery (SSRF)

A vulnerability in Trend Micro Control Manager versions 6.0 and 7.0 could allow an attacker to conduct a server-side request forgery SSRF attack on vulnerable installations...

CVE-2018-10510: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager versions 6.0 and 7.0 could allow an attacker to execute arbitrary code on vulnerable installations...

PT-2018-9934

Name of the Vulnerable Software and Affected Versions: Trend Micro Control Manager versions 6.0 through 7.0 Description: A vulnerability could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, potentially leading to a denial of server DoS. Recommendations: For...

CVE-2018-10512: Undefined Security Weakness

A vulnerability in Trend Micro Control Manager versions 6.0 and 7.0 could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, which may lead to a denial of server DoS...

Trend Micro Control Manager GetPassword() SQLi

The Trend Micro Control Manager running on the remote host is affected by an SQLi vulnerability when processing an HTTP request due to the lack of proper validation of a user-supplied string before using it to construct SQL queries. An unauthenticated, remote attacker can exploit this issue, via ...

Trend Micro Control Manager Directory Traversal In IMPORTFILE.PHP - Ver2

A directory traversal vulnerability exists in Trend Micro. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Trend Micro Control Manager External Entity Information Disclosure - Ver2

An information disclosure vulnerability exists in Trend Micro. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Trend Micro Control Manager Information Disclosure Vulnerability (CNVD-2018-05485)

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. An information disclosure vulnerability exists in TMCM version 6.0. A remote attacker could exploit this vulnerability to disclose sensitive information...

Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03777)

Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A remote code execution vulnerability...

Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability

Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. An AdHocQueryProcessor SQL Injection...

Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03780)

Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A GetXXX method SQL injection remote...

Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03778)

Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A XXXStatusXXX, XXXSummary, TemplateXX...

Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03779)

Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A TopXXX, ViolationXXX, and IncidentXX...

Trend Micro Control Manager Authentication Bypass Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. An authentication bypass vulnerability exists in TMCM version 6.0. A remote attacker could exploit this vulnerability to bypass authentication...

CVE-2018-3606

XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...

CVE-2018-3607

XXXTreeNode method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...

CVE-2018-3606

XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...