CVE-2018-10356

A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on…

published May 23, 2018

CVSS

—

EPSS

10%

Percentile

95.5

In the wild

Unconfirmed

What it is

A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class. Authentication is required to exploit this vulnerability.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.09807 · 95.5th percentile
Published: 2018-05-23T16:00Z

EPSS history

Timeline

23 MAY 16:00Z
A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on…
cvelistv5