CVE-2017-14087

概要

参考情報

• hyp3rlinx.altervista.org/advisories/CVE-2017-14087-TRENDMICRO-OFFICESCAN-XG-HOST-HEADER-INJECTION.txt · Exploit
• packetstormsecurity.com/files/144404/TrendMicro-OfficeScan-11.0-XG-12.0-Host-Header-Injection.html · Exploit
• seclists.org/fulldisclosure/2017/Sep/86 · Exploit
• securityfocus.com/archive/1/541267/100/0/threaded
• securityfocus.com/bid/101074 · Third Party Advisory
• securitytracker.com/id/1039500 · Third Party Advisory
• success.trendmicro.com/solution/1118372 · Mitigation
• exploit-db.com/exploits/42895 · Exploit

officescan のその他の脆弱性

• CVE-2021-32465高 8.8An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote…
• CVE-2021-32464高 7.8An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business…
• CVE-2021-36742高 7.8悪用確認済み（CISA KEV）A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.…
• CVE-2021-36741高 8.8悪用確認済み（CISA KEV）An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 1…
• CVE-2021-28646中 5.5An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker…