Trendmicro
Trendmicro Mobile Security: vulnerabilidades y CVE
Trendmicro Mobile Security tiene 21 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE21
Últimos 12 meses0
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-41178 | Media (6.1) | 1.6% | — | 23 ene 2024 | Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note,… |
| CVE-2023-41177 | Media (6.1) | 0.46% | — | 23 ene 2024 | Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note,… |
| CVE-2023-41176 | Media (6.1) | 1.6% | — | 23 ene 2024 | Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit against an authenticated victim that visits a malicious link provided by an attacker. Please note,… |
| CVE-2023-35695 | Alta (7.5) | 1.5% | — | 26 jun 2023 | A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product. |
| CVE-2023-32528 | Alta (8.8) | 3.0% | — | 26 jun 2023 | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the… |
| CVE-2023-32527 | Alta (8.8) | 2.9% | — | 26 jun 2023 | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the… |
| CVE-2023-32526 | Media (6.5) | 2.0% | — | 26 jun 2023 | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the… |
| CVE-2023-32525 | Media (6.5) | 2.0% | — | 26 jun 2023 | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the… |
| CVE-2023-32524 | Alta (8.8) | 2.6% | — | 26 jun 2023 | Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an… |
| CVE-2023-32523 | Alta (8.8) | 2.6% | — | 26 jun 2023 | Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an… |
| CVE-2023-32522 | Alta (8.1) | 3.3% | — | 26 jun 2023 | A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the… |
| CVE-2023-32521 | Crítica (9.1) | 67% | — | 26 jun 2023 | A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files. |
| CVE-2022-40980 | Crítica (9.1) | 1.2% | — | 19 sept 2022 | A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8… |
| CVE-2019-14688 | Alta (7) | 1.9% | — | 20 feb 2020 | Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product… |
| CVE-2019-19690 | Crítica (9.8) | 1.5% | — | 18 dic 2019 | Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature. |
| CVE-2017-14082 | Alta (7.5) | 3.9% | — | 19 ene 2018 | An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security (Enterprise) versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a… |
| CVE-2017-14081 | Alta (8.8) | 17% | — | 22 sept 2017 | Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations. |
| CVE-2017-14080 | Crítica (9.8) | 3.0% | — | 22 sept 2017 | Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password. |
| CVE-2017-14079 | Alta (8.8) | 11% | — | 22 sept 2017 | Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations. |
| CVE-2017-14078 | Crítica (9.8) | 50% | — | 22 sept 2017 | SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations. |
| CVE-2016-9319 | Media (5.9) | 0.77% | — | 31 mar 2017 | There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398. |
Otros productos de Trendmicro
Apex ONE · 180Officescan · 71Worry-free Business Security · 58Apex Central · 35Interscan WEB Security Virtual Appliance · 29Worry-free Business Security Services · 25Control Manager · 22Email Encryption Gateway · 19Serverprotect · 18Internet Security · 17Password Manager · 15Deep Security Agent · 15