9.8
CVE-2025-49216
- EPSS 0.09%
- Published 17.06.2025 20:28:07
- Last modified 08.09.2025 21:10:36
- Source security@trendmicro.com
- Teams watchlist Login
- Open Login
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.
Data is provided by the National Vulnerability Database (NVD)
Trendmicro ≫ Trend Micro Endpoint Encryption Version < 6.0.0.4013
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.258 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| security@trendmicro.com | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-477 Use of Obsolete Function
The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.