{"id":"CVE-2018-10357","published":"2018-05-23T16:00:00Z","modified":"2024-08-05T07:39:06Z","title":"A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to…","vendor":"Trend Micro","product":"Trend Micro Endpoint Application Control","tier":"core","eol":null,"affectedVersions":[{"vendor":"Trend Micro","product":"Trend Micro Endpoint Application Control","versions":["2.0"]}],"description":{"text":"A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop servlet. Authentication is required to exploit this vulnerability.","provenance":"source","from":"CVE.org"},"summary":{"text":"A directory traversal flaw in the FileDrop servlet of Trend Micro Endpoint Application Control 2.0 affects this product's installations. An attacker with network access and valid authentication could exploit it to execute arbitrary code on the vulnerable system.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:23:59Z"},"cvss":null,"epss":{"score":0.6466,"percentile":0.99238,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-469/","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/104355","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://success.trendmicro.com/solution/1119811","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-2431","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2431","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2018-05-23","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-10357","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":19.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.85,"detail":"percentile 0.9924"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}