CVE-2018-6230

PoC ×2—

CVSS 3.0

6.8 medium

EPSS

3%p88

Published

Mar 15, 2018 (Mar 15, 2018)

Modified

Jun 17, 2026

Description

A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.

Vendors: trendmicro
Products: email encryption gateway
Weakness: CWE-89
Vector: CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news2 stories

Dozen vulnerabilities discovered in Trend Micro Linux

Security AffairsFeb 25, 08:29 UTC · Feb 25, 2018Vulnerability CVE-2018-6219 CVE-2018-6230 CVE-2018-6223

Trend Micro fixes serious vulnerabilities in Email Encryption Gateway

Help Net SecurityFeb 22, 00:00 UTC · Feb 22, 2018Vulnerability CVE-2018-6219 CVE-2018-6220 CVE-2018-6221+9 CVEs