Scanmail
Vendor:
First CVE: Dec 31, 2003 · Active for 22 years
10
Total CVEs
More Total CVEs than 80% of tracked products
1.4
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Scanmail over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 31, 2003
22 years ago
Most Recent CVE
Mar 3, 2021
1,969 days ago
CVE Severity & Scoring
Scanmail10 CVEs
30%
60%
10%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (20.0%)
Network4 (40.0%)
Unknown4 (40.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (40.0%)
High2 (20.0%)
Unknown4 (40.0%)
User Interaction
None2 (20.0%)
Unknown4 (40.0%)
Required4 (40.0%)
Privileges Required
Low1 (10.0%)
High0 (0.0%)
None5 (50.0%)
Unknown4 (40.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2003-1343HIGH Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web m | Dec 31, 2003 | 7.5 | 35 | NO | YES |
CVE-2007-0851HIGH Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote | Feb 8, 2007 | 9.3 | 29 | NO | NO |
CVE-2017-14090CRITICAL A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted. | Dec 16, 2017 | 9.1 | 28 | NO | NO |
CVE-2017-14092HIGH The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to submit authenticated requests when an authenticated user br | Dec 16, 2017 | 8.8 | 27 | NO | NO |
CVE-2017-14091HIGH A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a uncommon feature - Other Update Sources - could be exploited | Dec 16, 2017 | 7.5 | 24 | NO | NO |
CVE-2019-14688HIGH Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be | Feb 20, 2020 | 7.0 | 23 | NO | NO |
CVE-2005-0533HIGH Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a cr | May 2, 2005 | 7.5 | 22 | NO | NO |
CVE-2017-14093MEDIUM The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scripting (XSS) attacks. | Dec 16, 2017 | 6.1 | 21 | NO | NO |
CVE-2021-25252MEDIUM Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freez | Mar 3, 2021 | 5.5 | 19 | NO | NO |
CVE-2015-3326MEDIUM Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number g | May 14, 2015 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
10.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Scanmail
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| gold | 2 | 8.4 | 6.3% | 0 | 0 |
| 6.1 | 2 | 8.4 | 6.3% | 0 | 0 |
| 3.81 | 2 | 8.4 | 6.3% | 0 | 0 |
| 3.8 | 2 | 8.4 | 6.3% | 0 | 0 |
| 2.6 | 2 | 8.4 | 6.3% | 0 | 0 |
| 2.51 | 2 | 8.4 | 6.3% | 0 | 0 |
| 14.0 | 2 | 6.3 | 1.2% | 0 | 0 |
| 12.0 | 4 | 7.9 | 1.0% | 0 | 0 |
| 11.0 | 1 | 5.0 | 2.3% | 0 | 0 |
| 10.2 | 1 | 5.0 | 2.3% | 0 | 0 |
| 1.0.0 | 1 | 9.3 | 8.3% | 0 | 0 |