{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-04T09:27:04.343","vulnerabilities":[{"cve":{"id":"CVE-2019-9488","sourceIdentifier":"security@trendmicro.com","published":"2019-09-11T18:15:10.817","lastModified":"2024-11-21T04:51:42.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM)."},{"lang":"es","value":"Trend Micro Deep Security Manager (versiones 10.x, 11.x) y Vulnerability Protection (versión 2.0) son vulnerables a un ataque de tipo XML External Entity. Sin embargo, para que el ataque sea posible, el atacante debe tener acceso root/admin a un host protegido que esté autorizado para comunicarse con el Deep Security Manager (DSM)."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:*","matchCriteriaId":"591F99B9-037F-49F2-90C9-C9327465ED3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u1:*:*:*:*:*:*","matchCriteriaId":"EF1D72E4-FDF6-42F2-9386-61EC30C1D211"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u10:*:*:*:*:*:*","matchCriteriaId":"2DAB0402-9690-4243-8B8C-2F172AAE2C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u11:*:*:*:*:*:*","matchCriteriaId":"B86C6A7C-7140-487B-821B-A43417CC7563"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u12:*:*:*:*:*:*","matchCriteriaId":"E83089CD-C7A6-4A38-9D66-1BD9CBA924DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u13:*:*:*:*:*:*","matchCriteriaId":"5B28B443-BC75-4242-8507-BECF19643494"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u14:*:*:*:*:*:*","matchCriteriaId":"DD7C0B63-A98D-4DE3-A6CC-450B2B5E24BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u15:*:*:*:*:*:*","matchCriteriaId":"5EF7DFAD-C645-4C17-BD8B-6AE48A320638"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u16:*:*:*:*:*:*","matchCriteriaId":"7F52979B-FFAF-46BD-A8D9-E2577A9EC348"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u17:*:*:*:*:*:*","matchCriteriaId":"90CFE193-D935-44B3-935D-0DCF6946152C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u18:*:*:*:*:*:*","matchCriteriaId":"A1DD6725-9556-45A2-8B06-58C810009197"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u19:*:*:*:*:*:*","matchCriteriaId":"3E0B9523-E67D-4186-8896-030F69B41C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u2:*:*:*:*:*:*","matchCriteriaId":"21F18E6E-BB26-46E9-8D27-8B697E922251"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u3:*:*:*:*:*:*","matchCriteriaId":"310BE409-1D0E-46FC-B844-C19E1121499C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u4:*:*:*:*:*:*","matchCriteriaId":"E3A7E805-AFD2-4B59-8DD5-C0EEFA3A6CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u5:*:*:*:*:*:*","matchCriteriaId":"02FBEF38-47CC-4BAA-8AC6-E320C39D58EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u6:*:*:*:*:*:*","matchCriteriaId":"0DCA6B2A-2E8C-4E54-B5D5-F4D25B5A1D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u7:*:*:*:*:*:*","matchCriteriaId":"0DE942D5-93D4-4081-B670-CEE98B9B043C"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u8:*:*:*:*:*:*","matchCriteriaId":"87A3CE1B-7B61-42B9-A670-90C75CF02A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:10.0:u9:*:*:*:*:*:*","matchCriteriaId":"82E894D8-4B43-493D-89C3-315541403598"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:-:*:*:*:*:*:*","matchCriteriaId":"BFDDD30A-3F6D-4611-A7EC-D66BC481D59D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:u1:*:*:*:*:*:*","matchCriteriaId":"08DA209E-A8FC-4917-9FC5-2DFB93339F92"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:u2:*:*:*:*:*:*","matchCriteriaId":"3786FB40-4B9C-4934-8B2D-8EA6E0D93E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:u3:*:*:*:*:*:*","matchCriteriaId":"56AA6016-4EA4-44B9-995A-323B67C8BC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:u4:*:*:*:*:*:*","matchCriteriaId":"21325FFE-6BE6-463D-A166-E97E33C2B38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:u5:*:*:*:*:*:*","matchCriteriaId":"FD179AD2-8B30-4B99-9580-53FE28930934"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:u6:*:*:*:*:*:*","matchCriteriaId":"F86DCE2E-1494-4A62-BD87-2847DF3BC84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.0:u7:*:*:*:*:*:*","matchCriteriaId":"593485A9-57B2-4F9C-8E07-51F8834C5A25"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:deep_security_manager:11.3:-:*:*:*:*:*:*","matchCriteriaId":"23E02397-40A2-4184-9E4C-8B38CF91EC16"},{"vulnerable":true,"criteria":"cpe:2.3:a:trendmicro:vulnerability_protection:2.0:-:*:*:*:*:*:*","matchCriteriaId":"1749CC8D-55E1-4278-BF9C-F0B415C32F31"}]}]}],"references":[{"url":"https://success.trendmicro.com/solution/1122900","source":"security@trendmicro.com","tags":["Patch","Vendor Advisory"]},{"url":"https://success.trendmicro.com/solution/1122900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}