VULNERABILITY INTELLIGENCE

CVE-2016-6268

CVSS score7.8 HIGH

EPSS probability0.98%

CISA KEVNot currently listed

Published2017-01-30

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory.

Primary references

cve@mitre.org — Exploit, Technical Description, Third Party Advisory
cve@mitre.org — Mitigation, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Patch, Vendor Advisory