CVE-2025-49216
- State
- Published
- Severity
- 9.8 Critical
- Published
- Jun 17, 2025
- Updated
- Jun 18, 2025
- Reserved
- Jun 3, 2025
Description
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | trendmicro |
Weaknesses
- CWE-477 Use of Obsolete Function
Affected Products
| Product | Versions |
|---|---|
Trend Micro Endpoint Encryption Policy ServerTrend Micro, Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.