E18-0nsm1
CVSS:
6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
1
Year:
2018
Description
This strike exploits an SQL injection vulnerability in Trend Micro Email Encryption Gateway.
The vulnerability is due to the improper sanitization of searching string sent to searchEmail.jsp script.
An attacker could exploit this by sending specifically crafted packets, potentially resulting in the execution of SQL commands which may lead to information disclosure,
database corruption, denial of service and others.
