Loading
Generated remediation guidance and an executive summary. No account required.
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. This is similar to, but not identical to CVE-2025-49215. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
Use CWE-89, Trendmicro vendor hub and Trend Micro Endpoint Encryption product page to widen CVE-2025-49218 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2025-49217, CVE-2025-49216 and CVE-2025-49213 for nearby disclosures in the same product family.