Known Vulnerabilities for Smart Protection Server by Trendmicro
Listed below are 10 of the newest known vulnerabilities associated with "Smart Protection Server" by "Trendmicro".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-10350 | A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a rem... | 8.8 - HIGH | 2018-05-25 | 2018-06-25 |
| CVE-2018-6237 | A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to man... | 7.5 - HIGH | 2018-05-25 | 2018-06-25 |
| CVE-2018-6231 | A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versi... | 9.8 - CRITICAL | 2018-03-15 | 2019-10-03 |
| CVE-2017-14097 | An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could all... | 9.8 - CRITICAL | 2018-01-19 | 2019-10-03 |
| CVE-2017-14096 | A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below ... | 6.1 - MEDIUM | 2018-01-19 | 2018-02-01 |
| CVE-2017-14095 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform... | 8.1 - HIGH | 2018-01-19 | 2019-10-09 |
| CVE-2017-14094 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform... | 9.8 - CRITICAL | 2018-01-19 | 2019-10-09 |
| CVE-2017-11398 | A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and bel... | 8.8 - HIGH | 2018-01-19 | 2019-10-09 |
| CVE-2017-11395 | Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allo... | 8.8 - HIGH | 2017-09-22 | 2019-10-03 |
| CVE-2016-6266 | ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before buil... | 8.8 - HIGH | 2017-01-30 | 2021-09-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Trendmicro | Smart Protection Server | 3.3 | All | All | All |
| Application | Trendmicro | Smart Protection Server | 3.2 | All | All | All |
| Application | Trendmicro | Smart Protection Server | 3.1 | All | All | All |
| Application | Trendmicro | Smart Protection Server | 3.0 | All | All | All |