Read the docs

Trendmicro

Records575All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical73CVSS 9.0–10.0
CVSS high335CVSS 7.0–8.9

Exploited now

Trendmicro records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

58 records in Worry-free Business Security · all components

Priority CRITICAL 97KEV

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installat…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04951 Published 2021-07-29 No fix listed CWE-434
Priority CRITICAL 97KEV

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent clie…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06165 Published 2020-03-18 No fix listed CWE-74
Priority CRITICAL 93KEV

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01482 Published 2021-07-29 No fix listed CWE-20
Priority CRITICAL 93KEV

A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02666 Published 2020-09-01 No fix listed
TI-2023-21788 CVE-2023-41179 · GHSA-vq2c-8m6j-g4vh

Code injection in Trend Micro Apex One

Priority CRITICAL 91KEV

A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate th…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04216 Published 2023-09-19 Fixed in 14.0.0.12380, 14.0.12637 +2 CWE-94
Priority MEDIUM 57

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1324 Published 2020-03-18 No fix listed CWE-306
Priority MEDIUM 55

The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which mak…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10929 Published 2008-08-27 No fix listed CWE-330
Priority MEDIUM 49

Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04179 Published 2020-03-18 No fix listed CWE-22
Priority MEDIUM 49

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's managemen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04538 Published 2019-10-28 No fix listed CWE-22
Priority LOW 38

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02807 Published 2020-11-18 No fix listed CWE-22
Priority LOW 37

An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Secu…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02335 Published 2022-02-24 No fix listed CWE-400
Priority LOW 37

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affec…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02257 Published 2019-04-05 No fix listed CWE-22
Priority LOW 36

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences fo…

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.0012 Published 2025-06-17 Fixed in 14.0.0.14002, 14.0.14492 +1 CWE-284
TI-2022-16679 CVE-2022-36336 · GHSA-j3r2-6983-xh2v

Link following in Trend Micro Apex One

Priority LOW 35

A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00571 Published 2022-07-29 No fix listed CWE-59
TI-2022-08498 CVE-2022-24680 · GHSA-qx5j-pc38-3g95

Link following in Trend Micro Apex One

Priority LOW 35

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2022-02-24 No fix listed CWE-59
TI-2022-08497 CVE-2022-24679 · GHSA-wc94-2wcf-jwvr

Link following in Trend Micro Apex One

Priority LOW 35

A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Securit…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00477 Published 2022-02-24 No fix listed CWE-59
Priority LOW 35

A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00479 Published 2022-01-08 No fix listed CWE-269
TI-2021-20452 CVE-2021-45231 · GHSA-c7c6-gf69-v976

Link following in Trend Micro Apex One

Priority LOW 35

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially craft…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00664 Published 2022-01-08 No fix listed CWE-59
TI-2021-18534 CVE-2021-42012 · GHSA-m654-qf29-wq6w

Out-of-bounds write in Trend Micro Apex One

Priority LOW 35

A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00578 Published 2021-10-21 No fix listed CWE-787
Priority LOW 35

A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0111 Published 2021-10-21 No fix listed CWE-476
TI-2020-15040 CVE-2020-24559 · GHSA-hq4h-fvjm-7fqw

Link following in Trend Micro Apex One

Priority LOW 35

A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00795 Published 2020-09-01 No fix listed CWE-59
TI-2020-15037 CVE-2020-24556 · GHSA-28fh-4j57-cc4w

Link following in Trend Micro Apex One

Priority LOW 35

A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on th…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00783 Published 2020-09-01 No fix listed CWE-59
Priority LOW 34

A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher l…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00274 Published 2022-01-08 No fix listed CWE-346
Priority LOW 34

An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0035 Published 2021-12-03 No fix listed CWE-269
Load more
Open these records in search →