CVE-2016-3987

Critical

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1)…

mitre·CWE-284·Published 2016-04-08

CVSS

9.8

EPSS

0.22

KEV

Exploits

cve.orgen

179 chars

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.

NVDen

179 chars

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.

El servidor HTTP en Trend Micro Password Manager permite a servidores web remotos ejecutar comandos arbitrarios a través del parámetro url en (1) api/openUrlInDefaultBrowser o (2) api/showSB.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	10.0	10.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H