CVE-2017-14097

9.8 criticalEPSS 13%

Critical (9.8) in trendmicro smart protection server. EPSS 13% chance of exploitation in the next 30 days.

An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2018-01-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:smart_protection_server

References

http://www.securityfocus.com/bid/102275
https://success.trendmicro.com/solution/1118992
https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
https://www.exploit-db.com/exploits/43388/
http://www.securityfocus.com/bid/102275

Check your stack JSON