CVE-2016-3987

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/openUrlInDefaultBrowser or (2) api/showSB.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://blog.trendmicro.com/information-on-reported-vulnerabilities-in-trend-micro-password-manager/Vendor Advisory
http://packetstormsecurity.com/files/135222/TrendMicro-Node.js-HTTP-Server-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034662Third Party Advisory, VDB Entry
https://code.google.com/p/google-security-research/issues/detail?id=693Third Party Advisory
https://www.exploit-db.com/exploits/39218/Exploit, Third Party Advisory, VDB Entry
http://blog.trendmicro.com/information-on-reported-vulnerabilities-in-trend-micro-password-manager/Vendor Advisory
http://packetstormsecurity.com/files/135222/TrendMicro-Node.js-HTTP-Server-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034662Third Party Advisory, VDB Entry
https://code.google.com/p/google-security-research/issues/detail?id=693Third Party Advisory
https://www.exploit-db.com/exploits/39218/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Apr 12, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-39887.3Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, L CVE-2016-39898.1The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, CVE-2016-39907.8Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to c CVE-2016-39917.8Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a de CVE-2016-39926.2cronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1) cronic.out.$$, (2) cronic.err.$$, or (3) cronic CVE-2016-39937.5Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of se CVE-2016-39948.2The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service (application crash) or obtain sensitive informati CVE-2016-39957.5The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.CVE-2016-39965.5ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data vi CVE-2016-39977.5NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of servic CVE-2016-39988.1NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cause a denial of s CVE-2016-39996.1Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web scri