CVE-2018-6230 Vulnerability Details

  /     /     /  

CVE-2018-6230 Metadata Quick Info

CVE Published: 15/03/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: trendmicro | Vendor: Trend Micro | Product: Trend Micro Email Encryption Gateway
Status : PUBLISHED

---

CVE-2018-6230 Description

A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: SQL Injection
Source: Trend Micro

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).