Priority CRITICAL 97KEV
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installat…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04951 · Published 2021-07-29 · No fix listed CWE-434
Priority CRITICAL 97KEV
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent clie…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06165 · Published 2020-03-18 · No fix listed CWE-74
Priority CRITICAL 93KEV
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01482 · Published 2021-07-29 · No fix listed CWE-20
Priority CRITICAL 93KEV
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02666 · Published 2020-09-01 · No fix listed
Priority CRITICAL 91KEV
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate th…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04216 · Published 2023-09-19 · Fixed in 14.0.0.12380, 14.0.12637 +2 CWE-94
Priority MEDIUM 57
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installa…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1324 · Published 2020-03-18 · No fix listed CWE-306
Priority MEDIUM 55
The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which mak…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.10929 · Published 2008-08-27 · No fix listed CWE-330
Priority MEDIUM 49
Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04179 · Published 2020-03-18 · No fix listed CWE-22
Priority MEDIUM 49
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04538 · Published 2019-10-28 · No fix listed CWE-22
Priority MEDIUM 40
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level p…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04584 · Published 2020-03-18 · No fix listed
Priority LOW 38
A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete a…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02807 · Published 2020-11-18 · No fix listed CWE-22
Priority LOW 37
An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Secu…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02335 · Published 2022-02-24 · No fix listed CWE-400
Priority LOW 37
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affec…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02257 · Published 2019-04-05 · No fix listed CWE-22
Priority LOW 36
An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…
CVSS 3.1HIGH 8.7· Local · Low privileges · No interaction · EPSS 0.0012 · Published 2025-06-17 · Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284
Priority LOW 35
A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00571 · Published 2022-07-29 · No fix listed CWE-59
Priority LOW 35
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00477 · Published 2022-02-24 · No fix listed CWE-59
Priority LOW 35
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00477 · Published 2022-02-24 · No fix listed CWE-59
Priority LOW 35
A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00479 · Published 2022-01-08 · No fix listed CWE-269
Priority LOW 35
A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially craft…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00664 · Published 2022-01-08 · No fix listed CWE-59
Priority LOW 35
A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00578 · Published 2021-10-21 · No fix listed CWE-787
Priority LOW 35
A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0111 · Published 2021-10-21 · No fix listed CWE-476
Priority LOW 35
A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00795 · Published 2020-09-01 · No fix listed CWE-59
Priority LOW 35
A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on th…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00783 · Published 2020-09-01 · No fix listed CWE-59
Priority LOW 34
A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher l…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00274 · Published 2022-01-08 · No fix listed CWE-346
Priority LOW 34
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0035 · Published 2021-12-03 · No fix listed CWE-269
Load more