Threat Discovery Appliance vulnerabilities | LiveThreat CVE Feed

Product

Threat Discovery Appliance

by Trendmicro · last CVE Apr 28, 2017

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 3High 9Medium 0Low 0

Severity

All severities12 Critical3 High9 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Threat Discovery Appliance to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-8593	8.8	7%	Apr 28	Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a… Affected: through 2.6.1062
CVE-2016-8592	8.8	6%	Apr 28	log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062
CVE-2016-8591	8.8	6%	Apr 28	log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062
CVE-2016-8590	8.8	6%	Apr 28	log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062
CVE-2016-8589	8.8	6%	Apr 28	log_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062
CVE-2016-8586	8.8	6%	Apr 28	detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via… Affected: through 2.6.1062
CVE-2016-8585	8.8	7%	Apr 28	admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell… Affected: through 2.6.1062
CVE-2016-8588	7.3	2%	Apr 28	The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the… Affected: through 2.6.1062
CVE-2016-8587	7.3	2%	Apr 28	dlp_policy_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via an archive file containing a… Affected: through 2.6.1062