Trend Micro IM Security 1.6.5
Approved changes feed: RSS · Atom
cpe:2.3:a:trendmicro:im_security:1.6.5:*:*:*:*:*:*:*
part: a version: 1.6.5 update: *
| Vendor | Trendmicro (c5410dda-4dad-5329-a26d-d91c43e01834) |
|---|---|
| Product | Im Security (894084a1-b73b-5844-9d0c-33921442c2fc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-31520 |
vulnerable | 2026-06-08 05:31:53.574451 |
Details available
A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface.
Published: 2021-05-10T11:00:31.000Z
Updated: 2024-08-03T23:03:33.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14688 |
vulnerable | 2026-06-08 05:12:55.899350 |
Details available
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.
Published: 2020-02-20T22:50:22.000Z
Updated: 2024-08-05T00:26:37.555Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.