CVE Catalog

CVE-2017-14090

Critical
Published: Translated: NVD NIST

Summary

A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.

Risk Assessment

The lack of encryption in communications may lead to data interception by unauthorized parties, posing a security risk to the organization.

Recommendation

It is recommended to implement encryption for all communications with update servers to protect data from interception.

Original NVD description (English source)

A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS