Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-10356

A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installati

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trendmicro

Description

A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class. Authentication is required to exploit this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trend Micro Trend Micro Email Encryption Gateway

  • 5.5affected

References