CVE-2019-9488: vulnerability in Trend Micro Deep Security
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).
Affected products
Trend Micro · Trend Micro Deep SecurityTrend Micro · Trend Micro Vulnerability ProtectionRelated CVEs — Trend Micro Deep Security
In the same product, most dangerous first.