AO
Endpoint Security
Apex One
On CISA KEVExploited in the wild
180
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 120Medium 47Low 0
Watch
Add Apex One to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34926 In wildKEV | 6.7 | May 21 | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Affected: before 14.0.0.17079; before 14.0.20731 |
| CVE-2023-25147 | 6.7 | Mar 10 | An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a… Affected: before 14.0.11960; 2019 |
| CVE-2022-41748 | 6.7 | Oct 10 | A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with administrative credentials to bypass certain… Affected: 2019 (on-prem) and SaaS |
| CVE-2020-8607 | 6.7 | Aug 5 | An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in… Affected: 2019; saas |
| CVE-2021-25246 | 6.5 | Feb 4 | An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an… Affected: 2019 |
| CVE-2023-52330 | 6.1 | Jan 23 | A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central Affected: before 14.0.12849; 2019 |
| CVE-2019-19692 | 6.1 | Dec 20 | Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console Affected: 2019 |
| CVE-2024-36307 | 5.5 | Jun 10 | A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on… Affected: through 14.0.13139; 14.0 through 14.0.0.12980 |
| CVE-2024-36306 | 5.5 | Jun 10 | A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on… Affected: 14.0 before 14.0.0.12980 |
| CVE-2023-32556 | 5.5 | Jun 26 | A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information Affected: before 14.0.12105; 2019 |
| CVE-2023-30902 | 5.5 | Jun 26 | A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro… Affected: before 14.0.12105; 2019 |
| CVE-2022-44648 | 5.5 | Dec 12 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations Affected: before 14.0.11789; 2019 |
| CVE-2022-44647 | 5.5 | Dec 12 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations Affected: before 14.0.11789; 2019 |
| CVE-2022-40140 | 5.5 | Sep 19 | An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations Affected: 2019 |
| CVE-2021-44022 | 5.5 | Dec 3 | A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service (DoS) Affected: 2019; 2019 |
| CVE-2021-3848 | 5.5 | Oct 6 | An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business… Affected: 2019 |
| CVE-2021-28646 | 5.5 | Apr 13 | An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file… Affected: 2019; 2019 |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 2019 |
| CVE-2021-25248 | 5.5 | Feb 4 | An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: 2019 |
| CVE-2020-25772 | 5.5 | Sep 29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on… Affected: 2019; saas |
| CVE-2020-25771 | 5.5 | Sep 29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on… Affected: 2019; saas |
| CVE-2020-25770 | 5.5 | Sep 29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on… Affected: 2019; saas |
| CVE-2020-24565 | 5.5 | Sep 29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on… Affected: 2019; saas |
| CVE-2020-24564 | 5.5 | Sep 29 | An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on… Affected: 2019; saas |
| CVE-2023-32553 | 5.3 | Jun 26 | An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive… Affected: before 14.0.12105; 2019 |
| CVE-2023-32552 | 5.3 | Jun 26 | An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive… Affected: before 14.0.12105; 2019 |
| CVE-2021-25243 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 2019 |
| CVE-2021-25242 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 2019 |
| CVE-2021-25241 | 5.3 | Feb 4 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to… Affected: 2019 |
| CVE-2021-25240 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 2019 |
| CVE-2021-25239 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to… Affected: 2019 |
| CVE-2021-25237 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about the managing port used by agents Affected: 2019 |
| CVE-2021-25235 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content… Affected: 2019 |
| CVE-2021-25234 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 2019 |
| CVE-2021-25233 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 2019 |
| CVE-2021-25232 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL… Affected: 2019 |
| CVE-2021-25231 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 2019 |
| CVE-2021-25230 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the… Affected: 2019 |
| CVE-2021-25229 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the… Affected: 2019 |
| CVE-2021-25228 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 2019 |
| CVE-2020-28583 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: 2019 |
| CVE-2020-28582 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: 2019 |
| CVE-2020-28577 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: 2019 |
| CVE-2020-28576 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: 2019 |
| CVE-2020-28573 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: 2019 |
| CVE-2019-19691 | 4.9 | Dec 20 | A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools Affected: 2019 |
| CVE-2020-25774 | 4.3 | Sep 29 | A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red information disclosure which would disclose… Affected: 2019; saas |
Showing 47