← Back

Im Security

im_security

Vendor: Trendmicro • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-31520
1Trendmicro
1Im Security
Jun 17, 2026
May 10, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access...Show more
A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface.Show less
CVE-2019-14688
1Trendmicro
8Control Manager
Endpoint SensorIm Security+5 more
Jun 17, 2026
Feb 20, 2020
N/A· v4
7.0 HIGH· v3
5.1 MEDIUM· v2
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installat...Show more
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.Show less