Approved changes feed: RSS · Atom

cpe:2.3:a:trend_micro:trend_micro_smart_protection_server_(standalone):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrend Micro (6c9d6123-4a91-55d6-a111-4d33b7deab1d)
ProductTrend Micro Smart Protection Server (Standalone) (05ba7ee1-4ca5-57c4-b410-dd08bd6b9a91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6237 vulnerable 2026-06-08 05:11:53.506357 Details available
A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service (DoS) situation.
Published: 2018-05-25T15:00:00.000Z
Updated: 2024-08-05T06:01:47.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6231 vulnerable 2026-06-08 05:11:53.499353 Details available
A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remote attackers to escalate privileges on vulnerable installations.
Published: 2018-03-15T19:00:00.000Z
Updated: 2024-08-05T06:01:47.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10350 vulnerable 2026-06-08 05:10:26.588120 Details available
A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php. Authentication is required in order to exploit this vulnerability.
Published: 2018-05-25T15:00:00.000Z
Updated: 2024-08-05T07:39:08.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14097 vulnerable 2026-06-08 05:08:49.200209 Details available
An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system.
Published: 2018-01-19T19:00:00.000Z
Updated: 2024-08-05T19:20:39.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14096 vulnerable 2026-06-08 05:08:49.199873 Details available
A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems.
Published: 2018-01-19T19:00:00.000Z
Updated: 2024-08-05T19:20:39.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14095 vulnerable 2026-06-08 05:08:49.199523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14094 vulnerable 2026-06-08 05:08:49.198545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11398 vulnerable 2026-06-08 05:08:37.524834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.