PatchTheCVEscanmail vulnerabilities and fixes
Recent CVEs affecting scanmail, with upgrade or downgrade steps. 6 tracked.
scanmail has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-02-20. Highest priority: CVE-2017-14090 (score 60/100).
- CVE-2019-14688 HIGH 7.0 DOWNGRADE DOWNGRADE Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of
- CVE-2017-14093 MEDIUM 6.1 DOWNGRADE The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross sit
- CVE-2017-14092 HIGH 8.8 DOWNGRADE The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an a
- CVE-2017-14091 HIGH 7.5 DOWNGRADE A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that
- CVE-2017-14090 CRITICAL 9.1 DOWNGRADE A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update se
- CVE-2015-3326 MEDIUM 5.0 DOWNGRADE Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Buil
FAQ
How do I fix scanmail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scanmail being exploited right now?
None of the tracked scanmail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scanmail CVE should I patch first?
CVE-2017-14090 currently ranks highest (60/100): A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update se.