{"id":"CVE-2018-6229","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-6229","generatedAt":"2026-10-29T00:35:08.365Z","title":"A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.","description":"A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the target system.","published":"2018-03-15T19:29:01.000Z","lastModified":"2026-06-17T02:01:33.000Z","status":"Modified","sourceIdentifier":"security@trendmicro.com","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-89"],"affected":["trendmicro/email encryption gateway"],"epss":{"score":0.10247,"percentile":0.95659,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.08131,"percentile":0.94672},{"date":"2026-09-22","score":0.10247,"percentile":0.9547}]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2018-02-22","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":44166,"kind":"exploit","title":"Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities","url":"https://www.exploit-db.com/exploits/44166","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/jsp/webapps/44166.txt","file":"exploits/jsp/webapps/44166.txt","published":"2018-02-22","added":"2018-02-22","updated":"2018-02-22","author":"Core Security","type":"webapps","platform":"jsp","port":null,"verified":true,"codes":["CVE-2018-6230","CVE-2018-6229","CVE-2018-6228","CVE-2018-6227","CVE-2018-6226","CVE-2018-6225","CVE-2018-6224","CVE-2018-6223","CVE-2018-6222","CVE-2018-6221","CVE-2018-6220","CVE-2018-6219"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 10.2%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-22T00:00:00.000Z","detail":{"to":0.10247,"from":0.08131,"percentile":0.9547},"summary":"EPSS moved from 8.1% to 10.2% probability of exploitation in the next thirty days."}],"references":[{"url":"https://success.trendmicro.com/solution/1119349","tags":["Patch","Vendor Advisory"],"source":"security@trendmicro.com"},{"url":"https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities","tags":["Exploit","Technical Description","Third Party Advisory"],"source":"security@trendmicro.com"},{"url":"https://www.exploit-db.com/exploits/44166/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"security@trendmicro.com"},{"url":"https://success.trendmicro.com/solution/1119349","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities","tags":["Exploit","Technical Description","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/44166/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-6229","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}