Trend Micro Cloud Edge vulnerabilities

2 CVEs affecting Trend Micro Cloud Edge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-48904, published 2024-10-22.

More from Trend Micro.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-48904, published 2024-10-22. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to…
• CVE-2021-25252, published 2021-03-03. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by…