Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority MEDIUM 42

A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01466 Published 2023-06-26 Fixed in 9.8.3294 CWE-532
Priority MEDIUM 46

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02992 Published 2023-06-26 Fixed in 9.8.3294 CWE-94
Priority MEDIUM 45

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02923 Published 2023-06-26 Fixed in 9.8.3294 CWE-94
Priority LOW 33

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02038 Published 2023-06-26 Fixed in 9.8.3294 CWE-434
Priority LOW 33

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02038 Published 2023-06-26 Fixed in 9.8.3294 CWE-434
Priority MEDIUM 43

Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02573 Published 2023-06-26 Fixed in 9.8.3294 CWE-287
Priority MEDIUM 45

Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02573 Published 2023-06-26 Fixed in 9.8.3294 CWE-287
Priority HIGH 70

A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.03321 Published 2023-06-26 Fixed in 9.8.3294 CWE-22
Priority HIGH 84

A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.66809 Published 2023-06-26 Fixed in 9.8.3294 CWE-22