CM
Product
Control Manager
22
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 12Medium 2Low 0
Watch
Add Control Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10511 | 10.0 | Aug 15 | A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on vulnerable installations Affected: 6.0; 7.0 |
| CVE-2018-10510 | 9.8 | Aug 15 | A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary code on vulnerable… Affected: 6.0; 7.0 |
| CVE-2018-3601 | 9.8 | Feb 9 | A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations Affected: 6.0 |
| CVE-2017-11389 | 9.8 | Aug 2 | Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory Affected: 6.0 |
| CVE-2017-11386 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in… Affected: 6.0 |
| CVE-2017-11385 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in… Affected: 6.0 |
| CVE-2017-11384 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in… Affected: 6.0 |
| CVE-2017-11383 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in… Affected: 6.0 |
| CVE-2018-3607 | 8.8 | Feb 9 | XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on… Affected: 6.0 |
| CVE-2018-3606 | 8.8 | Feb 9 | XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote… Affected: 6.0 |
| CVE-2018-3605 | 8.8 | Feb 9 | TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute… Affected: 6.0 |
| CVE-2018-3604 | 8.8 | Feb 9 | GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable… Affected: 6.0 |
| CVE-2018-3603 | 8.8 | Feb 9 | A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable… Affected: 6.0 |
| CVE-2018-3602 | 8.8 | Feb 9 | An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on… Affected: 6.0 |
| CVE-2017-11388 | 8.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before… Affected: 6.0 |
| CVE-2018-10512 | 7.5 | Aug 15 | A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to manipulate a reverse proxy .dll on vulnerable installations, which may lead to a… Affected: 6.0; 7.0 |
| CVE-2016-6220 | 7.5 | Aug 7 | Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0 Affected: 6.0 |
| CVE-2017-11390 | 7.5 | Aug 2 | XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure Affected: 6.0 |
| CVE-2017-11387 | 7.5 | Aug 2 | Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging… Affected: 6.0 |
| CVE-2019-14688 | 7.0 | Feb 20 | Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be… Affected: 7.0 |
| CVE-2018-3600 | 6.5 | Feb 9 | A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on… Affected: 6.0 |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 7.0 |
Showing 22