CVE Catalog
CVE-2016-4351
CriticalSummary
SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Risk Assessment
Attackers may gain access to sensitive data or take control of the system, posing a serious threat to the organization's security.
Recommendation
It is recommended to update Trend Micro Email Encryption Gateway to version 5.5 build 1107 or later to mitigate this vulnerability.
Original NVD description (English source)
SQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption Gateway (TMEEG) 5.5 before build 1107 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.