OF
Product
Officescan
On CISA KEVExploited in the wild
71
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 28Medium 33Low 0
Watch
Add Officescan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-36741 In wildKEV | 8.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: xg |
| CVE-2020-8467 In wildKEV | 8.8 | Mar 18 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability Affected: xg; xg |
| CVE-2020-8468 In wildKEV | 8.8 | Mar 18 | Trend Micro Multiple Products Content Validation Escape Vulnerability Affected: xg; xg |
| CVE-2021-36742 In wildKEV | 7.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: xg |
| CVE-2019-18187 In wildKEV | 7.5 | Oct 28 | Trend Micro OfficeScan Directory Traversal Vulnerability Affected: 11.0; xg; xg |
| CVE-2021-32465 | 8.8 | Aug 4 | An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass… Affected: xg |
| CVE-2018-10509 | 8.8 | Jun 12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations Affected: 11.0; xg; xg |
| CVE-2018-10508 | 8.8 | Jun 12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations Affected: 11.0; xg; xg |
| CVE-2017-5481 | 8.8 | May 3 | Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a… Affected: 11.0; 12.0 |
| CVE-2017-14084 | 8.1 | Oct 6 | A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations Affected: 11.0; 12.0 |
| CVE-2021-32464 | 7.8 | Aug 4 | An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an… Affected: xg |
| CVE-2021-28645 | 7.8 | Apr 13 | An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on… Affected: xg |
| CVE-2021-25253 | 7.8 | Apr 13 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local… Affected: xg |
| CVE-2021-25250 | 7.8 | Apr 13 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to… Affected: xg |
| CVE-2021-25249 | 7.8 | Feb 4 | An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: xg |
| CVE-2020-24562 | 7.8 | Sep 29 | A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to… Affected: xg |
| CVE-2020-24559 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain… Affected: xg |
| CVE-2019-9492 | 7.8 | Jul 26 | A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process -… Affected: 11.0; xg |
| CVE-2020-8470 | 7.5 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete… Affected: xg; xg |
| CVE-2019-9489 | 7.5 | Apr 5 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an… Affected: 11.0; xg; xg |
| CVE-2018-18332 | 7.5 | Dec 21 | A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on… Affected: xg |
| CVE-2018-18331 | 7.5 | Dec 21 | A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other… Affected: xg |
| CVE-2017-14087 | 7.5 | Oct 6 | A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links… Affected: 11.0; 12.0 |
| CVE-2017-14086 | 7.5 | Oct 6 | Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the… Affected: 11.0; 12.0 |
| CVE-2017-14083 | 7.5 | Oct 6 | A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file Affected: 11.0; 12.0 |
| CVE-2019-14688 | 7.0 | Feb 20 | Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be… Affected: xg |
| CVE-2018-6218 | 7.0 | Feb 16 | A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system Affected: 11.0; 12.0 |
| CVE-2017-14088 | 7.0 | Oct 6 | Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources… Affected: 11.0 |
Showing 28