Post-Authentication SQL Injection Vulnerability in Trend Micro Endpoint Encryption

CVE-2025-49215

What is CVE-2025-49215?

A post-authentication SQL injection vulnerability exists in Trend Micro's Endpoint Encryption PolicyServer. This flaw can allow an attacker to escalate privileges on installations where the vulnerability is present. To exploit this vulnerability, an attacker must first acquire the ability to execute low-privileged code on the target system, making it a critical vector for further unauthorized access. Organizations using this product should apply necessary mitigations to prevent exploitation.

References