CVE-2025-30642

CWE-593 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 66.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trend Micro, Inc. Trend Micro Deep SecurityTrendmicro Deep Security Agent
Timeline
PublishedJun 17

Description

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5trend_micro,_inc./trend_micro_deep_security20 — 20.0.1-25770

🔴Vulnerability Details

2
GHSA
GHSA-7h3q-9phg-4p7r: A link following vulnerability in Trend Micro Deep Security 20↗2025-06-17
▶
CVEList
CVE-2025-30642: A link following vulnerability in Trend Micro Deep Security 20↗2025-06-17
▶
CVE-2025-30642 (MEDIUM CVSS 5.5) | A link following vulnerability in T | cvebase.io