SE
Product
Serverprotect
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 8Low 0
Watch
Add Serverprotect to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25330 | 9.8 | Feb 24 | Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution Affected: 5.8; 5.8; 5.8 |
| CVE-2022-25329 | 9.8 | Feb 24 | Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console Affected: 5.8; 5.8; 5.8 |
| CVE-2021-36745 | 9.8 | Sep 29 | A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft… Affected: 5.8; 5.8; 5.8; 5.8; 6.0 |
| CVE-2017-9034 | 9.8 | May 26 | Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging… Affected: 3.0 |
| CVE-2020-24561 | 9.1 | Sep 15 | A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system Affected: 3.0 |
| CVE-2017-9033 | 8.8 | May 26 | Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for… Affected: 3.0 |
| CVE-2017-9036 | 7.8 | May 26 | Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory Affected: 3.0 |
| CVE-2022-25331 | 7.5 | Feb 24 | Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process Affected: 5.8; 5.8; 5.8 |
| CVE-2017-9035 | 7.4 | May 26 | Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers Affected: 3.0 |
| CVE-2019-14688 | 7.0 | Feb 20 | Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be… Affected: 5.8; 5.8; 5.8; 6.0 |
| CVE-2020-28575 | 6.7 | Dec 1 | A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations Affected: 3.0 |
| CVE-2020-8607 | 6.7 | Aug 5 | An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in… Affected: 5.8; 5.8; 5.8; 6.0 |
| CVE-2017-9037 | 6.1 | May 26 | Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the… Affected: 3.0 |
| CVE-2017-9032 | 6.1 | May 26 | Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the… Affected: 3.0 |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 5.8 |
| CVE-2021-25226 | 5.5 | Jan 27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the… Affected: 3.0 |
| CVE-2021-25225 | 5.5 | Jan 27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the… Affected: 3.0 |
| CVE-2021-25224 | 5.5 | Jan 27 | A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the… Affected: 3.0 |
Showing 18