Known vulnerabilities in Endpoint Encryption PolicyServer

Vendor: Trend Micro
Software: Endpoint Encryption PolicyServer
Software CPE: cpe:2.3:a:trend_micro:endpoint_encryption_policyserver:*:*:*:*:*:*:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Endpoint Encryption PolicyServer Endpoint Encryption PolicyServer is affected by 8 known vulnerabilities: 4 critical, 2 high, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111040 - Deserialization of Untrusted Data
CVE-2025-49217		 CWE-502 Critical
No
No
 6.0.0.4013 11.06.2025 SB2025061105
#VU111039 - Missing Authorization
CVE-2025-49216		 CWE-862 Critical
No
No
 6.0.0.4013 11.06.2025 SB2025061105
#VU111038 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-49215		 CWE-89 High
No
No
 6.0.0.4013 11.06.2025 SB2025061105
#VU111037 - Deserialization of Untrusted Data
CVE-2025-49214		 CWE-502 High
No
No
 6.0.0.4013 11.06.2025 SB2025061105
#VU111036 - Deserialization of Untrusted Data
CVE-2025-49213		 CWE-502 Critical
No
No
 6.0.0.4013 11.06.2025 SB2025061105
#VU111035 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-49218		 CWE-89 Low
No
No
 6.0.0.4013 11.06.2025 SB2025061105
#VU111034 - Deserialization of Untrusted Data
CVE-2025-49212		 CWE-502 Critical
No
No
 6.0.0.4013 11.06.2025 SB2025061105
#VU111033 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-49211		 CWE-89 Low
No
No
 6.0.0.4013 11.06.2025 SB2025061105