{"id":"CVE-2018-3604","published":"2018-02-09T22:00:00Z","modified":"2024-08-05T04:50:29Z","title":"GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow…","vendor":"Trend Micro","product":"Trend Micro Control Manager","tier":"core","eol":null,"affectedVersions":[{"vendor":"Trend Micro","product":"Trend Micro Control Manager","versions":["6.0"]}],"description":{"text":"GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is a SQL injection in the GetXXX method of Trend Micro Control Manager 6.0, which can lead to remote code execution. The provided facts do not specify the affected component in more detail, nor the access conditions an attacker needs.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:23:43Z"},"cvss":null,"epss":{"score":0.67848,"percentile":0.99316,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-088/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-084/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-067/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-097/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-102/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-095/","tags":["x_refsource_MISC"]},{"url":"https://success.trendmicro.com/solution/1119158","tags":["x_refsource_CONFIRM"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-18-096/","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-15458","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-15458","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2018-02-09","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-3604","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":19.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9932"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}