CVE-2018-6228: Trend Micro Email Encryption Gateway

Critical severity, CVSS 9.8. EPSS: 10.2% chance of exploitation in the next 30 days.

A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.

Affected products

• Trend Micro Email Encryption Gateway: version 5.5 only

Published 2018-03-15. Last modified 2026-06-17.