Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).

Product Status

Learn more

Versions 2 Total

Default Status: unknown

affected

  • affected at 10.x 
  • affected at 11.x 

Versions 1 Total

Default Status: unknown

affected

  • affected at 2.0 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.