https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-15365.htmlhttps://patchthecve.com/cve/CVE-2018-15365.htmlWed, 17 Jun 2026 01:42:19 +0000MEDIUM 5.4: A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability.https://patchthecve.com/cve/CVE-2016-5840.htmlhttps://patchthecve.com/cve/CVE-2016-5840.htmlWed, 17 Jun 2026 00:50:07 +0000HIGH 7.2: hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header.https://patchthecve.com/cve/CVE-2015-2873.htmlhttps://patchthecve.com/cve/CVE-2015-2873.htmlWed, 17 Jun 2026 00:24:54 +0000MEDIUM 5.5: Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct requehttps://patchthecve.com/cve/CVE-2015-2872.htmlhttps://patchthecve.com/cve/CVE-2015-2872.htmlWed, 17 Jun 2026 00:24:54 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web