CVE-2018-10357

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable…

published May 23, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS
—
EPSS
65%
Percentile
99.2
In the wild
Unconfirmed
What it is

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.64660 · 99.2th percentile
Published
2018-05-23T16:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 73% → 60%
    epss
  • 06 SEP 03:11Z
    EPSS moved 73% → 60%
    epss
  • 30 AUG 16:00Z
    EPSS moved 60% → 73%
    epss
  • 29 AUG 04:30Z
    EPSS moved 73% → 60%
    epss
  • 23 MAY 16:00Z
    A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable…
    cvelistv5