Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).
結論預警: CVE-2019-9488 綜合評估為中等風險（42.9/100）：CVSS 技術影響為中級，利用機率（EPSS 1.23%） 強制指令: 梳理受影響資產並納入修補計畫。
風險隨態勢動態變化；本站持續評估並同步更新本頁展示內容。
EPSS 日更估計相對被利用可能性；百分位表示該 CVE 在已評分漏洞中的相對排名（越高表示相對更嚴重）。
| # | 日期 | 舊 EPSS 分數 | 新 EPSS 分數 | 變化（新 − 舊） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.63% | 1.23% | +0.60% |
| 2 | 2025-03-30 | 1.22% | 0.63% | -0.59% |
| 3 | 2025-03-29 | — | 1.22% | — |
完整 EPSS 歷史 （共 9 筆）
該 CVE 的 CVSS 指標。
| 底座分 | 版本 | 嚴重度 | 向量 | 可利用性 | 影響 | 分數來源 |
|---|---|---|---|---|---|---|
| 4.9 | 3.1 | MEDIUM |
|
1.2 | 3.6 | [email protected] |
| 4.0 | 2.0 | MEDIUM |
|
8.0 | 2.9 | [email protected] |
| 廠商 | 產品 | 版本 | 原始 CPE |
|---|---|---|---|
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:-:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u1:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u10:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u11:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u12:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u13:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u14:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u15:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u16:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u17:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u18:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u19:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u2:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u3:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u4:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u5:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u6:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u7:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u8:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 10.0 | cpe:2.3:a:trendmicro:deep_security_manager:10.0:u9:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:-:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:u1:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:u2:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:u3:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:u4:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:u5:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:u6:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.0 | cpe:2.3:a:trendmicro:deep_security_manager:11.0:u7:*:*:*:*:*:* |
| trendmicro | deep_security_manager | 11.3 | cpe:2.3:a:trendmicro:deep_security_manager:11.3:-:*:*:*:*:*:* |
| trendmicro | vulnerability_protection | 2.0 | cpe:2.3:a:trendmicro:vulnerability_protection:2.0:-:*:*:*:*:*:* |
| URL | 標籤 |
|---|---|
| https://success.trendmicro.com/solution/1122900 | Patch Vendor Advisory |