← Vulnerability feed

Vulnerability record · CVE-2016-3987 · published 12 April 2016

CVE-2016-3987: Trendmicro password manager improper access control vulnerability

Trendmicro · Password Manager

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.

9.8 CVSS 3.1 Critical EPSS 22% · top 2.4% CWE-284 · Improper access control
9.8CVSS 3.1 base score, v2 10.0
22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://blog.trendmicro.com/information-on-reported-vulnerabilities-in-trend-micro-password-manager/ Vendor Advisory
http://packetstormsecurity.com/files/135222/TrendMicro-Node.js-HTTP-Server-Command-Execution.html ExploitThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1034662 Third Party AdvisoryVDB Entry
https://code.google.com/p/google-security-research/issues/detail?id=693 Third Party Advisory
https://www.exploit-db.com/exploits/39218/ ExploitThird Party AdvisoryVDB Entry
http://blog.trendmicro.com/information-on-reported-vulnerabilities-in-trend-micro-password-manager/ Vendor Advisory
http://packetstormsecurity.com/files/135222/TrendMicro-Node.js-HTTP-Server-Command-Execution.html ExploitThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1034662 Third Party AdvisoryVDB Entry
https://code.google.com/p/google-security-research/issues/detail?id=693 Third Party Advisory
https://www.exploit-db.com/exploits/39218/ ExploitThird Party AdvisoryVDB Entry

Track CVE-2016-3987 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2021-32462Trendmicro password manager vulnerabilityTrend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerabili…EPSS 5.2%7.8CVE-2025-52837Trendmicro password manager link following vulnerabilityTrend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could …EPSS 0.16%7.8CVE-2022-28394Trendmicro password manager uncontrolled search path element vulnerabilityEOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and below provided by Trend Micro Incorporated contains an…EPSS 0.27%7.8CVE-2022-30523Trendmicro password manager link following vulnerabilityTrend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could …EPSS 0.40%7.8CVE-2022-26337Trendmicro password manager uncontrolled search path element vulnerabilityTrend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability tha…EPSS 0.68%7.8CVE-2021-32461Trendmicro password manager vulnerabilityTrend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which …EPSS 0.37%7.8CVE-2021-28647Trendmicro password manager uncontrolled search path element vulnerabilityTrend Micro Password Manager version 5 (Consumer) is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious …EPSS 0.47%7.8CVE-2020-8469Trendmicro password manager uncontrolled search path element vulnerabilityTrend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged…EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2016-3987), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.