Known vulnerabilities in Deep Security

Vendor: Trend Micro
Software: Deep Security
Software CPE: cpe:2.3:a:trend_micro:deep_security:*:*:*:*:*:*:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Deep Security Deep Security is affected by 18 known vulnerabilities: 1 high, 3 medium, 14 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106393 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-30642		 CWE-59 Low
No
No
 20.0.1-25770 02.04.2025 SB2025040221
#VU106392 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-30641		 CWE-59 Low
No
No
 20.0.1-25770 02.04.2025 SB2025040221
#VU106391 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-30640		 CWE-59 Low
No
No
 20.0.1-25770 02.04.2025 SB2025040221
#VU101851 - Untrusted Search Path
CVE-2024-55955		 CWE-426 Low
No
No
 20.0.1-23340 19.12.2024 SB2024121928
#VU100598 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-51503		 CWE-78 Medium
No
No
 20.0.1-21510 18.11.2024 SB2024111860
#VU98809 - Improper Access Control
CVE-2024-48903		 CWE-284 Low
No
No
 20.0.1-17380 18.10.2024 SB2024101806
#VU91004 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-36358		 CWE-59 Low
No
No
 20.0.1-9400 04.06.2024 SB2024060449
#VU85438 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-52338		 CWE-59 Low
No
No
 20.0.0-8438 16.01.2024 SB2024011639
#VU85437 - Improper Access Control
CVE-2023-52337		 CWE-284 Low
No
No
 20.0.0-8438 16.01.2024 SB2024011639
#VU67631 - Improper Link Resolution Before File Access ('Link Following')
CVE-2022-40710		 CWE-59 Low
No
No
 20.0.0-5394 26.09.2022 SB2022092601
#VU67630 - Out-of-bounds read
CVE-2022-40709		 CWE-125 Low
No
No
 20.0.0-5394 26.09.2022 SB2022092601
#VU67629 - Out-of-bounds read
CVE-2022-40708		 CWE-125 Low
No
No
 20.0.0-5394 26.09.2022 SB2022092601
#VU67628 - Out-of-bounds read
CVE-2022-40707		 CWE-125 Low
No
No
 20.0.0-5394 26.09.2022 SB2022092601
#VU59842 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23120		 CWE-94 Low
No
No
 10.0 U32, 11.0 U28, 12.0 U22, 20.0.0-3445 19.01.2022 SB2022011942
#VU59841 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-23119		 CWE-22 Low
No
No
 10.0 U32, 11.0 U28, 12.0 U22, 20.0.0-3445 19.01.2022 SB2022011942
#VU51109 - Resource exhaustion
CVE-2021-25252		 CWE-400 Medium
No
No
 10.0 U29, 11.0 U25, 12.0 U15, 20.0 LTS 02.03.2021 SB2021030220
#VU35149 - Exposure of sensitive information to an unauthorized actor
CVE-2019-15626		 CWE-200 Medium
No
No
 - 17.10.2019 SB2019101718
#VU10629 - Uncontrolled Search Path Element
CVE-2018-6218		 CWE-427 High
No
No
 - 19.02.2018 SB2018021419