Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v8hq-vh94-52xw

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

EPSS

Процентиль: 3%
0.00016
Низкий

7.7 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.7
nvd
8 месяцев назад

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

CVSS3: 7.7
fstec
8 месяцев назад

Уязвимость функции ProcessWhereClause сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption (TMEE), позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 3%
0.00016
Низкий

7.7 High

CVSS3

Дефекты

CWE-89