Priority MEDIUM 42
A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01466 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-532
Priority MEDIUM 46
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02992 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-94
Priority MEDIUM 45
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02923 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-94
Priority LOW 33
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02038 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-434
Priority LOW 33
Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02038 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-434
Priority MEDIUM 43
Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02573 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-287
Priority MEDIUM 45
Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02573 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-287
Priority HIGH 70
A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.03321 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-22
Priority HIGH 84
A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.66809 · Published 2023-06-26 · Fixed in 9.8.3294 CWE-22