Trendmicro Serverprotect For Storage — known CVE vulnerabilities

Every CVE whose affected-product data names Trendmicro Serverprotect For Storage, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-25329 — CVSS 9.8 (critical): Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in…
• CVE-2022-25330 — CVSS 9.8 (critical): Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the…
• CVE-2022-25331 — CVSS 7.5 (high): Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash…
• CVE-2021-25252 — CVSS 5.5 (medium): Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may…