AO
Endpoint Security
Apex One
On CISA KEVExploited in the wild
180
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 120Medium 47Low 0
Watch
Add Apex One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54948 In wildKEV | 9.8 | Aug 5 | Trend Micro Apex One OS Command Injection Vulnerability Affected: 2019 (14.0) before 14.0.0.14039 |
| CVE-2022-26871 In wildKEV | 9.8 | Mar 29 | Trend Micro Apex Central Arbitrary File Upload Vulnerability Affected: All versions, or not specified |
| CVE-2020-8599 In wildKEV | 9.8 | Mar 18 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Affected: 2019 |
| CVE-2025-71211 | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-71210 | 9.8 | May 21 | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations Affected: before 14.0.0.14136; before 14.0.20315 |
| CVE-2025-54987 | 9.8 | Aug 5 | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected… Affected: 2019 (14.0) before 14.0.0.14039 |
| CVE-2023-32557 | 9.8 | Jun 26 | A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server… Affected: before 14.0.12105; 2019 |
| CVE-2023-25143 | 9.8 | Mar 10 | An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected… Affected: before 14.0.11960; 2019 |
| CVE-2022-40144 | 9.8 | Sep 19 | A vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an attacker to bypass the product's login authentication by falsifying request parameters… Affected: 2019 |
| CVE-2020-8598 | 9.8 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to… Affected: 2019 |
| CVE-2019-18189 | 9.8 | Oct 28 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and… Affected: All versions, or not specified |
| CVE-2023-0587 | 9.1 | Feb 1 | A file upload vulnerability in exists in Trend Micro Apex One server build 11110 Affected: All versions, or not specified |
| CVE-2022-41746 | 9.1 | Oct 10 | A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate privileges and modify… Affected: 2019 (on-prem) and SaaS |
Showing 13