CVE-2018-6226: Trend Micro Email Encryption Gateway

Medium severity, CVSS 5.4. EPSS: 1.6% chance of exploitation in the next 30 days.

Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attacker to inject client-side scripts into vulnerable systems.

Affected products

• Trend Micro Email Encryption Gateway: version 5.5 only

Published 2018-03-15. Last modified 2026-06-17.