Skip to content

Trend Micro · weakness class

SQL Injection

22 CVEs

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
8

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

  1. GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable in…CVE-2018-3604Trend Micro · 68% likely

    CWE-89

  2. SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.CVE-2017-14078Trend Micro · 50% likely

    CWE-89

  3. XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote at…CVE-2018-3606Trend Micro · 49% likely

    CWE-89

  4. TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute…CVE-2018-3605Trend Micro · 20% likely

    CWE-89

  5. XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerab…CVE-2018-3607Trend Micro · 14% likely

    CWE-89

  6. A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable i…CVE-2018-10350Trend Micro · 14% likely

    CWE-89

  7. A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary cod…CVE-2018-6229Trend Micro · 10% likely

    CWE-89

  8. A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that…CVE-2018-6228Trend Micro · 10% likely

    CWE-89

  9. A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installat…CVE-2018-10356Trend Micro · 9.6% likely

    CWE-89

  10. A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable inst…CVE-2018-3603Trend Micro · 8.1% likely

    CWE-89

  11. An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulne…CVE-2018-3602Trend Micro · 8.1% likely

    CWE-89

  12. A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the form…CVE-2018-10351Trend Micro · 3.4% likely

    CWE-89

  13. A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbi…CVE-2018-6230Trend Micro · 3.3% likely

    CWE-89

  14. Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code…CVE-2023-32530Trend Micro, Inc. · 2.4% likely

    CWE-89

  15. Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code…CVE-2023-32529Trend Micro, Inc. · 2.2% likely

    CWE-89

  16. An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must fir…CVE-2024-39753Trend Micro, Inc. · CVSS 7.5 · 2.0% likely

    CWE-89

  17. A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the form…CVE-2018-10352Trend Micro · 2.0% likely

    CWE-89

  18. A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable inst…CVE-2018-10353Trend Micro · 1.3% likely

    CWE-89

  19. A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note:…CVE-2024-46903Trend Micro, Inc. · CVSS 6.5 · 1.2% likely

    CWE-89

  20. A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note:…CVE-2024-46902Trend Micro, Inc. · CVSS 4.9 · 0.7% likely

    CWE-89

  21. A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is simil…CVE-2025-49218Trend Micro, Inc. · CVSS 7.7 · 0.1% likely

    CWE-89

  22. A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacke…CVE-2025-49211Trend Micro, Inc. · CVSS 7.7 · 0.1% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in