Post-Authentication SQL Injection in Trend Micro Endpoint Encryption PolicyServer

CVE-2025-49218

What is CVE-2025-49218?

A post-authentication SQL injection vulnerability exists within Trend Micro's Endpoint Encryption PolicyServer, which may enable an attacker to escalate privileges on affected installations. To successfully exploit this vulnerability, an attacker must first gain the ability to execute low-privileged code on the system. This exposure can have serious implications for system security, necessitating immediate attention from administrators to mitigate potential risks.

References