CVE-2018-6219

PoC ×2—

CVSS 3.0

6.5 medium

EPSS

4%p90

Published

Mar 15, 2018 (Mar 15, 2018)

Modified

Jun 17, 2026

Description

An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with certain types of update data.

Vendors: trendmicro
Products: email encryption gateway
Weakness: CWE-295
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news2 stories

Dozen vulnerabilities discovered in Trend Micro Linux

Security AffairsFeb 25, 08:29 UTC · Feb 25, 2018Vulnerability CVE-2018-6219 CVE-2018-6230 CVE-2018-6223

Trend Micro fixes serious vulnerabilities in Email Encryption Gateway

Help Net SecurityFeb 22, 00:00 UTC · Feb 22, 2018Vulnerability CVE-2018-6219 CVE-2018-6220 CVE-2018-6221+9 CVEs