Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pfg8-gr28-jw28

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

EPSS

Процентиль: 3%
0.00018
Низкий

7.7 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.7
nvd
2 месяца назад

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

CVSS3: 8.8
fstec
11 месяцев назад

Уязвимость реализации метода BuildEnterpriseSearchString сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption (TMEE), позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 3%
0.00018
Низкий

7.7 High

CVSS3

Дефекты

CWE-89