[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fc5Z-PscVmwUNN8naOooMwvdmAzigOmNlQJ9nACDSXxM":3,"g5a-risk:CVE-2017-14090":115},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":39,"epssPercentile":14,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":66,"weaknesses":67,"weaknessesCount":48,"isActivelyExploited":76,"cisaInfo":14,"otxData":14,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":111,"notableEvents":112},"CVE-2017-14090","What is CVE-2017-14090?","A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are not encrypted.","2017-12-16T02:29:09.01","2025-04-20T01:37:25.86",9.1,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":29,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.2,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",6.4,"MEDIUM",10,4.9,0.0134,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"trendmicro","scanmail","12.0","cpe:2.3:a:trendmicro:scanmail:12.0:*:*:*:*:microsoft_exchange:*:*",1,[50,56,62,64],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fsuccess.trendmicro.com\u002Fsolution\u002F1118486","Trendmicro",[54,55],"Patch","Vendor Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.coresecurity.com\u002Fadvisories\u002Ftrend-micro-scanmail-microsoft-exchange-multiple-vulnerabilities","Coresecurity",[60,61],"Exploit","Third Party Advisory",{"url":51,"source":52,"tags":63},[54,55],{"url":57,"source":58,"tags":65},[60,61],4,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2017-14090? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-14090, a critical severity cyber security vulnerability from 2017. A vulnerability in Trend Micro ScanMail for Exchange 12...","CVE-2017-14090, CVE-2017-14090 vulnerability, CVE-2017-14090 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, trendmicro security, scanmail vulnerability","\u002Fwhat-is\u002Fcve-2017-14090",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":9,"dateModified":10,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-14090","Cybersecurity","CVE-2017-14090, CVE-2017-14090 vulnerability, CVE-2017-14090 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":14,"Negate":14,"Nodes":105},[106],{"Operator":107,"Negate":14,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":110,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"5602BD80-ECA4-47FB-B3CB-258F7D1BD323",[],[],{"lastModified":10,"cacheTime":114,"version":32},1792478905190,{"score":116,"band":117,"action":118,"scoredAt":119},53,"Medium","Plan remediation","2026-10-20T06:40:04.81814+00:00"]