Trend Micro

Records604All Threatist records

Exploited (KEV)12In CISA KEV

CVSS critical94CVSS 9.0–10.0

CVSS high336CVSS 7.0–8.9

Exploited now

Trend Micro records in CISA KEV

TI-2026-27150 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability CRITICAL 89KEV 2026-05-21 TI-2025-34668 Trend Micro Apex One OS Command Injection Vulnerability CRITICAL 100KEV 2025-08-18 TI-2023-21788 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability CRITICAL 91KEV 2023-09-21 TI-2022-19029 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CRITICAL 91KEV 2022-09-15 TI-2022-10115 Trend Micro Apex Central Arbitrary File Upload Vulnerability CRITICAL 100KEV 2022-03-31 TI-2019-13207 Trend Micro OfficeScan Directory Traversal Vulnerability CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Officescan 29 records HIGH Serverprotect 25 records HIGH Interscan Viruswall 22 records MEDIUM Control Manager 6 records HIGH Interscan Webmanager 4 records MEDIUM Officescan Corporate Edition 4 records HIGH Pc-cillin 4 records MEDIUM Scanmail 4 records MEDIUM

Records

6 records in Control Manager · all components

TI-2011-04283 CVE-2011-5001 · GHSA-2cqq-v6m5-rqq4

Stack-based buffer overflow in the CGenericScheduler::AddTask function in…

HIGH 79

Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbit…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.64363 Published 2011-12-25 No fix listed CWE-119

TI-2007-00828 CVE-2007-0851 · GHSA-h2w9-3qj3-7rf9

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file…

MEDIUM 51

Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08576 Published 2007-02-08 No fix listed

TI-2012-02601 CVE-2012-2998 · GHSA-w5jw-j5vj-mhrq

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager…

MEDIUM 42

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06089 Published 2012-09-28 No fix listed CWE-89

TI-2005-00489 CVE-2005-0533 · GHSA-h9gg-52h2-vqv9

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used…

MEDIUM 40

Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file nam…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04409 Published 2005-02-24 No fix listed

TI-2005-00345 CVE-2005-0383 · GHSA-2jvf-qvqx-mrwj

Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain…

LOW 36

Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01746 Published 2005-02-13 No fix listed

TI-2006-03160 CVE-2006-3261 · GHSA-5ch3-2r78-59w3

Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01342 Published 2006-06-27 No fix listed

Open these records in search →

Critical	94
High	336
Medium	168
Low	6
No CVSS	0