Apex One and Apex Central
CVE-2025-49211: SQL injection in Trend Micro Endpoint Encryption Policy Server
A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trend Micro Endpoint Encryption Policy Server 6.0 | 6.0.0.4013 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.