OF
Product
Officescan
On CISA KEVExploited in the wild
71
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 28Medium 33Low 0
Watch
Add Officescan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8599 In wildKEV | 9.8 | Mar 18 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Affected: xg; xg |
| CVE-2021-36741 In wildKEV | 8.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: xg |
| CVE-2020-8467 In wildKEV | 8.8 | Mar 18 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Affected: xg; xg |
| CVE-2020-8468 In wildKEV | 8.8 | Mar 18 | Trend Micro Multiple Products Content Validation Escape Vulnerability Affected: xg; xg |
| CVE-2021-36742 In wildKEV | 7.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: xg |
| CVE-2019-18187 In wildKEV | 7.5 | Oct 28 | Trend Micro OfficeScan Directory Traversal Vulnerability Affected: 11.0; xg; xg |
| CVE-2020-8598 | 9.8 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to… Affected: xg; xg |
| CVE-2019-18189 | 9.8 | Oct 28 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and… Affected: 11.0; xg; xg |
| CVE-2018-3608 | 9.8 | Jul 6 | A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially… Affected: 11.0; 12.0 |
| CVE-2017-14089 | 9.8 | Oct 6 | An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target… Affected: 11.0; 12.0 |
| CVE-2017-11394 | 9.8 | Aug 3 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations Affected: 11.0; 12.0 |
| CVE-2017-11393 | 9.8 | Aug 3 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations Affected: 11.0; 12.0 |
| CVE-2008-2433 | 9.8 | Aug 27 | The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session… Affected: 7.0 through 8.0 |
| CVE-2021-32465 | 8.8 | Aug 4 | An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass… Affected: xg |
| CVE-2018-10509 | 8.8 | Jun 12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations Affected: 11.0; xg; xg |
| CVE-2018-10508 | 8.8 | Jun 12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations Affected: 11.0; xg; xg |
| CVE-2017-5481 | 8.8 | May 3 | Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a… Affected: 11.0; 12.0 |
| CVE-2017-14084 | 8.1 | Oct 6 | A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations Affected: 11.0; 12.0 |
| CVE-2021-32464 | 7.8 | Aug 4 | An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an… Affected: xg |
| CVE-2021-28645 | 7.8 | Apr 13 | An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on… Affected: xg |
| CVE-2021-25253 | 7.8 | Apr 13 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local… Affected: xg |
| CVE-2021-25250 | 7.8 | Apr 13 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to… Affected: xg |
| CVE-2021-25249 | 7.8 | Feb 4 | An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: xg |
| CVE-2020-24562 | 7.8 | Sep 29 | A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to… Affected: xg |
| CVE-2020-24559 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain… Affected: xg |
| CVE-2019-9492 | 7.8 | Jul 26 | A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process -… Affected: 11.0; xg |
| CVE-2020-8470 | 7.5 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete… Affected: xg; xg |
| CVE-2019-9489 | 7.5 | Apr 5 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an… Affected: 11.0; xg; xg |
| CVE-2018-18332 | 7.5 | Dec 21 | A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on… Affected: xg |
| CVE-2018-18331 | 7.5 | Dec 21 | A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other… Affected: xg |
| CVE-2017-14087 | 7.5 | Oct 6 | A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links… Affected: 11.0; 12.0 |
| CVE-2017-14086 | 7.5 | Oct 6 | Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the… Affected: 11.0; 12.0 |
| CVE-2017-14083 | 7.5 | Oct 6 | A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file Affected: 11.0; 12.0 |
| CVE-2019-14688 | 7.0 | Feb 20 | Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be… Affected: xg |
| CVE-2018-6218 | 7.0 | Feb 16 | A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system Affected: 11.0; 12.0 |
| CVE-2017-14088 | 7.0 | Oct 6 | Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources… Affected: 11.0 |
| CVE-2020-8607 | 6.7 | Aug 5 | An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in… Affected: xg |
| CVE-2021-25246 | 6.5 | Feb 4 | An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an… Affected: xg |
| CVE-2018-10505 | 6.3 | Jun 8 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due… Affected: 11.0; xg; xg |
| CVE-2018-10359 | 6.3 | Jun 8 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due… Affected: 11.0; xg; xg |
| CVE-2018-10358 | 6.3 | Jun 8 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due… Affected: 11.0; xg; xg |
| CVE-2017-8801 | 6.1 | May 5 | Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website Affected: 11.0; 12.0 |
| CVE-2021-28646 | 5.5 | Apr 13 | An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file… Affected: xg |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: All versions, or not specified |
| CVE-2021-25248 | 5.5 | Feb 4 | An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: xg |
| CVE-2021-25243 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25242 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25240 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25239 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to… Affected: xg |
| CVE-2021-25238 | 5.3 | Feb 4 | An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to… Affected: xg |