CM
Product
Control Manager
22
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 12Medium 2Low 0
Watch
Add Control Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10511 | 10.0 | Aug 15 | A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on vulnerable installations Affected: 6.0; 7.0 |
| CVE-2018-10510 | 9.8 | Aug 15 | A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary code on vulnerable… Affected: 6.0; 7.0 |
| CVE-2018-3601 | 9.8 | Feb 9 | A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations Affected: 6.0 |
| CVE-2017-11389 | 9.8 | Aug 2 | Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory Affected: 6.0 |
| CVE-2017-11386 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in… Affected: 6.0 |
| CVE-2017-11385 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in… Affected: 6.0 |
| CVE-2017-11384 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in… Affected: 6.0 |
| CVE-2017-11383 | 9.8 | Aug 2 | SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in… Affected: 6.0 |
Showing 8