← Vulnerability feed

Vulnerability record · CVE-2016-4351 · published 5 May 2016

CVE-2016-4351: Trendmicro email encryption gateway sql injection vulnerability

Trendmicro · Email Encryption Gateway

SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

9.8 CVSS 3.1 Critical EPSS 2.8% · top 14.2% CWE-89 · SQL injection
9.8CVSS 3.1 base score, v2 7.5
2.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.zerodayinitiative.com/advisories/ZDI-16-248 Third Party AdvisoryVDB Entry
https://esupport.trendmicro.com/solution/en-US/1114060.aspx Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-16-248 Third Party AdvisoryVDB Entry
https://esupport.trendmicro.com/solution/en-US/1114060.aspx Vendor Advisory

Track CVE-2016-4351 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-6228Trendmicro email encryption gateway sql injection vulnerabilityA SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload a…EPSS 10%9.8CVE-2018-6229Trendmicro email encryption gateway sql injection vulnerabilityA SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to up…EPSS 10%9.8CVE-2018-6220Trendmicro email encryption gateway injection vulnerabilityAn arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to…EPSS 9.9%9.8CVE-2018-6223Trendmicro email encryption gateway missing authentication for critical function vulnerabilityA missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate t…EPSS 10%8.8CVE-2018-10351Trendmicro email encryption gateway sql injection vulnerabilityA vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installat…EPSS 3.6%8.8CVE-2018-10352Trendmicro email encryption gateway sql injection vulnerabilityA vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installat…EPSS 2.1%8.8CVE-2018-10354Trendmicro email encryption gateway os command injection vulnerabilityA command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbit…EPSS 13%8.8CVE-2018-10356Trendmicro email encryption gateway sql injection vulnerabilityA SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL stat…EPSS 10%

Source: NIST National Vulnerability Database (record CVE-2016-4351), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.