OF
Product
Officescan
On CISA KEVExploited in the wild
71
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 28Medium 33Low 0
Watch
Add Officescan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8599 In wildKEV | 9.8 | Mar 18 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability Affected: xg; xg |
| CVE-2020-8598 | 9.8 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to… Affected: xg; xg |
| CVE-2019-18189 | 9.8 | Oct 28 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and… Affected: 11.0; xg; xg |
| CVE-2018-3608 | 9.8 | Jul 6 | A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially… Affected: 11.0; 12.0 |
| CVE-2017-14089 | 9.8 | Oct 6 | An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target… Affected: 11.0; 12.0 |
| CVE-2017-11394 | 9.8 | Aug 3 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations Affected: 11.0; 12.0 |
| CVE-2017-11393 | 9.8 | Aug 3 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations Affected: 11.0; 12.0 |
| CVE-2008-2433 | 9.8 | Aug 27 | The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session… Affected: 7.0 through 8.0 |
Showing 8