SP
Product
Smart Protection Server
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 1Low 0
Watch
Add Smart Protection Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-6231 | 9.8 | Mar 15 | A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remote attackers to… Affected: through 3.3 |
| CVE-2017-14097 | 9.8 | Jan 19 | An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with… Affected: through 3.2 |
| CVE-2017-14094 | 9.8 | Jan 19 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on… Affected: through 3.2 |
| CVE-2016-6269 | 9.1 | Jan 30 | Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers… Affected: 2.5; 2.6; 3.0 |
| CVE-2018-10350 | 8.8 | May 25 | A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable… Affected: 3.0; 3.1; 3.2; 3.3 |
| CVE-2017-11398 | 8.8 | Jan 19 | A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack… Affected: through 3.2 |
| CVE-2017-11395 | 8.8 | Sep 22 | Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute… Affected: 3.1; 3.2 |
| CVE-2016-6267 | 8.8 | Jan 30 | SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary… Affected: 2.5; 2.6; 3.0 |
| CVE-2016-6266 | 8.8 | Jan 30 | ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute… Affected: 2.5; 2.6; 3.0 |
| CVE-2017-14095 | 8.1 | Jan 19 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion… Affected: through 3.2 |
| CVE-2016-6268 | 7.8 | Jan 30 | Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root… Affected: 2.5; 2.6; 3.0 |
| CVE-2018-6237 | 7.5 | May 25 | A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of… Affected: 3.0; 3.1; 3.2; 3.3 |
| CVE-2017-14096 | 6.1 | Jan 19 | A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload… Affected: through 3.2 |
Showing 13