CVE-2018-10357: A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote at...

Security readout for executives and security teams

Trend Micro Endpoint Application Control 2.0 has an authenticated directory traversal flaw that could let a remote attacker run arbitrary code. The main business concern is compromise of a security control platform, which can weaken endpoint protection and increase incident impact. Exposure is likely limited to organizations running Trend Micro Endpoint Application Control 2.0. Risk is higher where the management application or affected servlet is reachable beyond trusted admin networks. Authentication is required, so stolen, weak, or overprivileged credentials materially affect exposure. Prioritize remediation where this product protects sensitive endpoints or is reachable outside restricted admin networks. Treat it as high impact because successful exploitation could compromise a security management component, but account for the authentication requirement and incomplete exploitation evidence. Mitigation focus: Inventory Trend Micro Endpoint Application Control deployments and identify any version 2.0 instances.; Review Trend Micro solution 1119811 for vendor-supported update or mitigation guidance.; Restrict access to the application to trusted administrative networks only..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.