CVE-2017-11398

8.8 highEPSS 8.2%

A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack active user sessions to perform authenticated requests on a vulnerable system.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 8.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWEs: CWE-534, CWE-285
Published: 2018-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:smart_protection_server

References

http://www.securityfocus.com/bid/102275
https://success.trendmicro.com/solution/1118992
https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
https://www.exploit-db.com/exploits/43388/
http://www.securityfocus.com/bid/102275

Check your stack JSON