WB
Product
Worry-free Business Security
On CISA KEVExploited in the wild
58
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 35Medium 19Low 0
Watch
Add Worry-free Business Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-36741 In wildKEV | 8.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: 10.0 |
| CVE-2020-8468 In wildKEV | 8.8 | Mar 18 | Trend Micro Multiple Products Content Validation Escape Vulnerability Affected: 9.0; 9.5; 10.0; 10.0 |
| CVE-2021-36742 In wildKEV | 7.8 | Jul 29 | Trend Micro Multiple Products Improper Input Validation Vulnerability Affected: 10.0 |
| CVE-2020-24557 In wildKEV | 7.8 | Sep 1 | Trend Micro Multiple Products Improper Access Control Vulnerability Affected: 10.0 |
| CVE-2023-41179 In wildKEV | 7.2 | Sep 19 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Affected: 10.0 |
| CVE-2020-8600 | 9.8 | Mar 18 | Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass… Affected: 9.0; 9.5; 10.0; 10.0 |
| CVE-2020-8598 | 9.8 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to… Affected: 9.0; 9.5; 10.0; 10.0 |
| CVE-2019-18189 | 9.8 | Oct 28 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and… Affected: 9.5; 10.0; 10.0 |
| CVE-2008-2433 | 9.8 | Aug 27 | The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session… Affected: 5.0 |
| CVE-2025-49154 | 7.8 | Jun 17 | An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files… Affected: 10.0; 10.0 |
| CVE-2022-36336 | 7.8 | Jul 29 | A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on… Affected: 10.0 |
| CVE-2022-24680 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 10.0 |
| CVE-2022-24679 | 7.8 | Feb 24 | A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 10.0 |
| CVE-2021-45441 | 7.8 | Jan 10 | A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over… Affected: 10.0 |
| CVE-2021-45440 | 7.8 | Jan 10 | A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse… Affected: 10.0 |
| CVE-2021-45231 | 7.8 | Jan 10 | A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a… Affected: 10.0 |
| CVE-2021-44021 | 7.8 | Dec 3 | An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations Affected: 10.0 |
| CVE-2021-44020 | 7.8 | Dec 3 | An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations Affected: 10.0 |
| CVE-2021-44019 | 7.8 | Dec 3 | An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations Affected: 10.0 |
| CVE-2021-42108 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to… Affected: 10.0 |
| CVE-2021-42107 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 10.0 |
| CVE-2021-42106 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 10.0 |
| CVE-2021-42105 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 10.0 |
| CVE-2021-42104 | 7.8 | Oct 21 | Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a… Affected: 10.0 |
| CVE-2021-42012 | 7.8 | Oct 21 | A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate… Affected: 10.0 |
| CVE-2021-32463 | 7.8 | Jul 20 | An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS), Worry-Free Business Security 10.0 SP1 and Worry-Free… Affected: 10.0 |
| CVE-2021-25249 | 7.8 | Feb 4 | An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: 10.0 |
| CVE-2020-24559 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain… Affected: 10.0 |
| CVE-2020-24556 | 7.8 | Sep 1 | A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an… Affected: 10.0 |
| CVE-2022-24678 | 7.5 | Feb 24 | An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1… Affected: 10.0 |
| CVE-2021-23139 | 7.5 | Oct 21 | A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations Affected: 10.0 |
| CVE-2020-28574 | 7.5 | Nov 18 | A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit… Affected: 10.0 |
| CVE-2020-8470 | 7.5 | Mar 18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete… Affected: 9.0; 9.5; 10.0; 10.0 |
| CVE-2019-9489 | 7.5 | Apr 5 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an… Affected: 9.5; 10.0 |
| CVE-2022-23805 | 7.1 | Feb 4 | A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a… Affected: 10.0 |
| CVE-2021-45442 | 7.1 | Jan 10 | A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the… Affected: 10.0 |
| CVE-2021-44024 | 7.1 | Jan 10 | A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a… Affected: 10.0 |
| CVE-2020-24558 | 7.1 | Sep 1 | A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an… Affected: 10.0 |
| CVE-2018-6218 | 7.0 | Feb 16 | A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system Affected: 9.5; 9.5 |
| CVE-2021-25246 | 6.5 | Feb 4 | An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an… Affected: 10.0 |
| CVE-2016-1224 | 6.1 | Jun 19 | CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers… Affected: 9.0 |
| CVE-2021-3848 | 5.5 | Oct 6 | An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business… Affected: 10.0 |
| CVE-2021-25252 | 5.5 | Mar 3 | Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system… Affected: 10.1 |
| CVE-2021-25248 | 5.5 | Feb 4 | An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services)… Affected: 10.0 |
| CVE-2021-25245 | 5.3 | Feb 4 | An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of settings informaiton Affected: 10.0 |
| CVE-2021-25244 | 5.3 | Feb 4 | An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of configuration informaiton Affected: 10.0 |
| CVE-2021-25243 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 10.0 |
| CVE-2021-25242 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 10.0 |
| CVE-2021-25241 | 5.3 | Feb 4 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to… Affected: 10.0 |
| CVE-2021-25240 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: 10.0 |