Trendmicro Threat Discovery Appliance — known CVE vulnerabilities

Every CVE whose affected-product data names Trendmicro Threat Discovery Appliance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2016-7552 — CVSS 9.8 (critical): On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote…
• CVE-2016-8584 — CVSS 9.8 (critical): Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attackers to bypass…
• CVE-2016-7547 — CVSS 9.8 (critical): A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the…
• CVE-2016-8593 — CVSS 8.8 (high): Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote…
• CVE-2016-8585 — CVSS 8.8 (high): admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary…
• CVE-2016-8586 — CVSS 8.8 (high): detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute…
• CVE-2016-8591 — CVSS 8.8 (high): log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code…
• CVE-2016-8592 — CVSS 8.8 (high): log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute…
• CVE-2016-8589 — CVSS 8.8 (high): log_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary…
• CVE-2016-8590 — CVSS 8.8 (high): log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary…
• CVE-2016-8588 — CVSS 7.3 (high): The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute…
• CVE-2016-8587 — CVSS 7.3 (high): dlp_policy_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute…