Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-9488

Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trendmicro

Description

Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trend Micro Trend Micro Deep Security

  • 10.xaffected
  • 11.xaffected

Trend Micro Trend Micro Vulnerability Protection

  • 2.0affected

References