CVE-2012-2998

HIGH 7.5CVE-2012-2998 · Published 28/09/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
control manager trend_micro	`= 2.0= 2.1= 2.5= 3.0= 3.5= 5.0= 5.5= 6.0≤ 5.5`	No fix yet

Description

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

esupport.trendmicro.com/solution/en-us/1061043.aspx · Vendor Advisory
jvn.jp/en/jp/JVN42014489/index.html · Patch
jvndb.jvn.jp/jvndb/JVNDB-2012-000090 · Patch
kb.cert.org/vuls/id/950795 · US Government Resource
securitytracker.com/id
spentera.com/2012/09/trend-micro-control-manager-sql-injection-vulnerability · Patch
trendmicro.com/ftp/documentation/readme/readme_critical_patch_TMCM55_1823.txt · Patch
trendmicro.com/ftp/documentation/readme/readme_critical_patch_tmcm60_patch1_1449.txt · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free