Описание
A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.
Ссылки
- PatchVendor Advisory
- ExploitTechnical DescriptionThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- PatchVendor Advisory
- ExploitTechnical DescriptionThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:trendmicro:email_encryption_gateway:5.5:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01807
Низкий
6.8 Medium
CVSS3
8.3 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 6.8
github
больше 3 лет назад
A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.
EPSS
Процентиль: 82%
0.01807
Низкий
6.8 Medium
CVSS3
8.3 High
CVSS2
Дефекты
CWE-89