CVE-2017-11398CWE-285

CVE-2017-11398: vulnerability in Trend Micro Smart Protection Server (Standalone)

Published · Updated

Follow this CVE+ Monitor Trend Micro Smart Protection Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 8.2%
from disclosure to weaponsame day
Published on NVDJan 19
1st PoCDec 19
A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.
Affected products
Trend Micro · Trend Micro Smart Protection Server (Standalone)
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Trend Micro Smart Protection Server (Standalone)

In the same product, most dangerous first.

CVE-2017-14094—CVE-2017-14094EPSS 19.4%CVE-2018-10350—CVE-2018-10350EPSS 13.9%CVE-2017-14097—CVE-2017-14097EPSS 12.7%CVE-2017-14095—CVE-2017-14095EPSS 12.5%CVE-2018-6231—CVE-2018-6231EPSS 6.9%CVE-2018-6237—CVE-2018-6237EPSS 6.2%