CVE-2017-14078

Critical

Published: 22/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 contain SQL Injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.

Risk Assessment

Attackers can exploit these vulnerabilities to gain control over the system, potentially leading to data loss or security breaches within the organization.

Recommendation

It is recommended to upgrade to version 9.7 Patch 3 or later to mitigate these vulnerabilities.

Original NVD description (English source)

SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.