VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Sep 11, 2019· Updated Jun 17, 2026

CVE-2019-9488

CVE-2019-9488

Description

Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

34
  • Trend Micro/Deep Security Manager30 versions
    cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:*+ 29 more
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u10:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u11:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u12:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u13:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u14:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u15:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u16:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u17:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u18:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u19:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u1:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u2:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u3:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u4:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u5:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u6:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u7:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u8:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:10.0:u9:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:-:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:u1:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:u2:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:u3:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:u4:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:u5:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:u6:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.0:u7:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security_manager:11.3:-:*:*:*:*:*:*
    • (no CPE)range: 10.x, 11.x
  • Trend Micro/Vulnerability Protection3 versions
    cpe:2.3:a:trendmicro:vulnerability_protection:2.0:-:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:trendmicro:vulnerability_protection:2.0:-:*:*:*:*:*:*
    • (no CPE)range: 2.0
    • (no CPE)range: 2.0
  • Trend Micro/Internet Securitycpe-rescue
    Range: 10.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.