CVE-2016-4351

9.8 criticalEPSS 2.8%

Critical (9.8) in trendmicro email encryption gateway. EPSS 2.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2016-05-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:email_encryption_gateway

References

http://www.zerodayinitiative.com/advisories/ZDI-16-248
https://esupport.trendmicro.com/solution/en-US/1114060.aspx
http://www.zerodayinitiative.com/advisories/ZDI-16-248
https://esupport.trendmicro.com/solution/en-US/1114060.aspx

Check your stack JSON