OF
Product
Officescan
On CISA KEVExploited in the wild
71
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 28Medium 33Low 0
Watch
Add Officescan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8607 | 6.7 | Aug 5 | An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in… Affected: xg |
| CVE-2021-25246 | 6.5 | Feb 4 | An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an… Affected: xg |
| CVE-2018-10505 | 6.3 | Jun 8 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due… Affected: 11.0; xg; xg |
| CVE-2018-10359 | 6.3 | Jun 8 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due… Affected: 11.0; xg; xg |
| CVE-2018-10358 | 6.3 | Jun 8 | A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due… Affected: 11.0; xg; xg |
| CVE-2017-8801 | 6.1 | May 5 | Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website Affected: 11.0; 12.0 |
| CVE-2021-28646 | 5.5 | Apr 13 | An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file… Affected: xg |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: All versions, or not specified |
| CVE-2021-25248 | 5.5 | Feb 4 | An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: xg |
| CVE-2021-25243 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25242 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25240 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25239 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to… Affected: xg |
| CVE-2021-25238 | 5.3 | Feb 4 | An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to… Affected: xg |
| CVE-2021-25236 | 5.3 | Feb 4 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25235 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content… Affected: xg |
| CVE-2021-25234 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25233 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25232 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL… Affected: xg |
| CVE-2021-25231 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25230 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the… Affected: xg |
| CVE-2021-25229 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the… Affected: xg |
| CVE-2021-25228 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2020-28583 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28582 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28577 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28576 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28573 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2017-14085 | 5.3 | Oct 6 | Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain… Affected: 11.0; 12.0 |
| CVE-2016-1223 | 5.3 | Jun 19 | Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read… Affected: 11.0 |
| CVE-2019-19691 | 4.9 | Dec 20 | A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools Affected: xg |
| CVE-2018-10506 | 4.7 | Jun 8 | A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to disclose sensitive information on vulnerable… Affected: 11.0; xg; xg |
| CVE-2018-10507 | 4.4 | Jun 12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention… Affected: 11.0; xg; xg |
Showing 33