medium4.3Public exploit code
CVE-2018-6225
An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protect…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities2018-02-22 · webapps · jsp · Verified
Impact
An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose a normally protected configuration script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Email Encryption Gateway | Version 5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://success.trendmicro.com/solution/1119349
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44166/
- https://success.trendmicro.com/solution/1119349
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44166/