Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:email_encryption_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrendmicro (c5410dda-4dad-5329-a26d-d91c43e01834)
ProductEmail Encryption Gateway (c66bf4ed-2c1c-514c-92fb-07677b8c19f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10356 vulnerable 2026-06-08 05:10:26.594537 Details available
A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRequestDomains class. Authentication is required to exploit this vulnerability.
Published: 2018-05-23T16:00:00.000Z
Updated: 2024-08-05T07:39:07.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10355 vulnerable 2026-06-08 05:10:26.594255 Details available
An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploit this vulnerability.
Published: 2018-05-23T16:00:00.000Z
Updated: 2024-08-05T07:39:07.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10354 vulnerable 2026-06-08 05:10:26.593969 Details available
A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the LauncherServer. Authentication is required to exploit this vulnerability.
Published: 2018-05-23T16:00:00.000Z
Updated: 2024-08-05T07:39:07.654Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10353 vulnerable 2026-06-08 05:10:26.593660 Details available
A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable installations due to a flaw in the formChangePass class. Authentication is required to exploit this vulnerability.
Published: 2018-05-23T16:00:00.000Z
Updated: 2024-08-05T07:39:07.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10352 vulnerable 2026-06-08 05:10:26.593330 Details available
A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formConfiguration class. Authentication is required to exploit this vulnerability.
Published: 2018-05-23T16:00:00.000Z
Updated: 2024-08-05T07:39:07.136Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10351 vulnerable 2026-06-08 05:10:26.592911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4351 vulnerable 2026-06-08 05:07:47.214893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.