CVE-2016-4351
Last modified
CVE-2016-4351 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.. EPSS estimates a 2.77% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Email Encryption Gateway | <= 5.5 |
References
- http://www.zerodayinitiative.com/advisories/ZDI-16-248Third Party Advisory, VDB Entry
- https://esupport.trendmicro.com/solution/en-US/1114060.aspxVendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-248Third Party Advisory, VDB Entry
- https://esupport.trendmicro.com/solution/en-US/1114060.aspxVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-4351?
How severe is CVE-2016-4351?
How do I fix CVE-2016-4351?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-4345Integer overflow in the php_filter_encode_url function in ex…9.8
- CVE-2016-4346Integer overflow in the str_pad function in ext/standard/str…9.8
- CVE-2016-4347Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2016-4348The _rsvg_css_normalize_font_size function in librsvg 2.40.2…
- CVE-2016-4349Untrusted search path vulnerability in Cisco WebEx Productiv…
- CVE-2016-4350Multiple SQL injection vulnerabilities in the Web Services w…
- CVE-2016-4352Integer overflow in the demuxer function in libmpdemux/demux…
- CVE-2016-4353ber-decoder.c in Libksba before 1.3.3 does not properly hand…
- CVE-2016-4354ber-decoder.c in Libksba before 1.3.3 uses an incorrect inte…
- CVE-2016-4355Multiple integer overflows in ber-decoder.c in Libksba befor…
- CVE-2016-4356The append_utf8_value function in the DN decoder (dn.c) in L…
- CVE-2016-4357HPE Matrix Operating Environment before 7.5.1 allows remote …
Are you affected by CVE-2016-4351?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST