Vulnerabilities (CVE)

Filtered by vendor Trendmicro Subscribe
Filtered by product Control Manager
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-11388 1 Trendmicro 1 Control Manager 2024-02-04 6.5 MEDIUM 8.8 HIGH
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638.
CVE-2017-11390 1 Trendmicro 1 Control Manager 2024-02-04 5.0 MEDIUM 7.5 HIGH
XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly ZDI-CAN-4706.