Trend Micro Deep Discovery Inspector vulnerabilities

6 CVEs affecting Trend Micro Deep Discovery Inspector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-46903, published 2024-10-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2872, published 2015-08-23. Medium severity, CVSS 4.3. EPSS: 2.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x…
CVE-2015-2873, published 2015-08-23. Medium severity, CVSS 5.5. EPSS: 2.7% chance of exploitation in the next 30 days. Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions…
CVE-2024-46903, published 2024-10-22. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must…
CVE-2018-15365, published 2018-09-28. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable…
CVE-2024-46902, published 2024-10-22. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must…
CVE-2021-25252, published 2021-03-03. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by…