PatchTheCVEtrend micro vulnerabilities
Recent CVEs affecting trend micro products. 4 tracked.
trend micro has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2016-06-30. Highest priority: CVE-2012-2998 (score 55/100).
- CVE-2016-5840 HIGH 7.2 DOWNGRADE hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows
- CVE-2016-3664 HIGH 7.4 UPGRADE Trend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the mobile applic
- CVE-2015-3326 MEDIUM 5.0 DOWNGRADE Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Buil
- CVE-2012-2998 HIGH 7.5 UPGRADE SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823
FAQ
How do I fix trend micro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is trend micro being exploited right now?
None of the tracked trend micro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which trend micro CVE should I patch first?
CVE-2012-2998 currently ranks highest (55/100): SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823.