Trend Micro Endpoint Encryption vulnerabilities

8 known vulnerabilities in Trend Micro Endpoint Encryption from Trend Micro. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Trend Micro Endpoint Encryption Policy Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49218Jun 17, 2025Trend Micro

  A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215. Please note: an attacker must first o

• 9.8 Critical severity

  Trend Micro Endpoint Encryption Policy Server: Deserialization of Untrusted Data

  CVE-2025-49217Jun 17, 2025Trend MicroEPSS 1.17%

  An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method

• 9.8 Critical severity

  Trend Micro Endpoint Encryption Policy Server: Use of Obsolete Function

  CVE-2025-49216Jun 17, 2025Trend Micro

  An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.

• 8.8 High severity

  Trend Micro Endpoint Encryption Policy Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49215Jun 17, 2025Trend Micro

  A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the t

• 8.8 High severity

  Trend Micro Endpoint Encryption Policy Server: Deserialization of Untrusted Data

  CVE-2025-49214Jun 17, 2025Trend Micro

  An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code

• 9.8 Critical severity

  Trend Micro Endpoint Encryption Policy Server: Deserialization of Untrusted Data

  CVE-2025-49213Jun 17, 2025Trend MicroEPSS 14.2%

  An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method

• 9.8 Critical severity

  Trend Micro Endpoint Encryption Policy Server: Deserialization of Untrusted Data

  CVE-2025-49212Jun 17, 2025Trend MicroEPSS 14.2%

  An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method

• 7.8 High severity

  Trend Micro Endpoint Encryption Policy Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49211Jun 17, 2025Trend Micro

  A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target syst