Read the docs
TI-2022-07289 Aliases CVE-2022-23120GHSA-gpqg-9388-qcwr

Code injection in Trend Micro Deep Security Agent for Linux

Priority MEDIUM 43CWE-94Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.

Why it matters now

EPSS 0.06378 93rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Trend MicroTrend Micro Deep Security Agent for Linux20, 12, 11, 10—No fix listedCNA
  • Trend Micro Deep Security Agent for Linux VendorTrend Micro Affected 20, 12, 11, 10 Fixed in — No fix listed CNA

CPE configurations NVD · 84

CPEVersionsRoleVendor
cpe:2.3:a:trendmicro:deep_security_agent:*:*:*:*:long_term_support:*:*:*20.0 to before 20.0.0-3445VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:-:*:*:long_term_support:*:*:*10.0VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update1:*:*:long_term_support:*:*:*10.0 update1VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update10:*:*:long_term_support:*:*:*10.0 update10VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update11:*:*:long_term_support:*:*:*10.0 update11VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update12:*:*:long_term_support:*:*:*10.0 update12VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update13:*:*:long_term_support:*:*:*10.0 update13VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update14:*:*:long_term_support:*:*:*10.0 update14VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update15:*:*:long_term_support:*:*:*10.0 update15VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update16:*:*:long_term_support:*:*:*10.0 update16VulnerableTrendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:*:*:*:*:long_term_support:*:*:* Versions 20.0 to before 20.0.0-3445 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:-:*:*:long_term_support:*:*:* Versions 10.0 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update1:*:*:long_term_support:*:*:* Versions 10.0 update1 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update10:*:*:long_term_support:*:*:* Versions 10.0 update10 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update11:*:*:long_term_support:*:*:* Versions 10.0 update11 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update12:*:*:long_term_support:*:*:* Versions 10.0 update12 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update13:*:*:long_term_support:*:*:* Versions 10.0 update13 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update14:*:*:long_term_support:*:*:* Versions 10.0 update14 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update15:*:*:long_term_support:*:*:* Versions 10.0 update15 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update16:*:*:long_term_support:*:*:* Versions 10.0 update16 Vulnerable ·Trendmicro
Show 74 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update17:*:*:long_term_support:*:*:*10.0 update17VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update18:*:*:long_term_support:*:*:*10.0 update18VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update19:*:*:long_term_support:*:*:*10.0 update19VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update2:*:*:long_term_support:*:*:*10.0 update2VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update20:*:*:long_term_support:*:*:*10.0 update20VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update21:*:*:long_term_support:*:*:*10.0 update21VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update22:*:*:long_term_support:*:*:*10.0 update22VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update23:*:*:long_term_support:*:*:*10.0 update23VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update24:*:*:long_term_support:*:*:*10.0 update24VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update25:*:*:long_term_support:*:*:*10.0 update25VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update26:*:*:long_term_support:*:*:*10.0 update26VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update27:*:*:long_term_support:*:*:*10.0 update27VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update28:*:*:long_term_support:*:*:*10.0 update28VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update29:*:*:long_term_support:*:*:*10.0 update29VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update3:*:*:long_term_support:*:*:*10.0 update3VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update30:*:*:long_term_support:*:*:*10.0 update30VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update31:*:*:long_term_support:*:*:*10.0 update31VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update4:*:*:long_term_support:*:*:*10.0 update4VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update5:*:*:long_term_support:*:*:*10.0 update5VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update6:*:*:long_term_support:*:*:*10.0 update6VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update7:*:*:long_term_support:*:*:*10.0 update7VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update8:*:*:long_term_support:*:*:*10.0 update8VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:10.0:update9:*:*:long_term_support:*:*:*10.0 update9VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:-:*:*:long_term_support:*:*:*11.0VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update1:*:*:long_term_support:*:*:*11.0 update1VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update10:*:*:long_term_support:*:*:*11.0 update10VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update11:*:*:long_term_support:*:*:*11.0 update11VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update12:*:*:long_term_support:*:*:*11.0 update12VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update13:*:*:long_term_support:*:*:*11.0 update13VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update14:*:*:long_term_support:*:*:*11.0 update14VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update15:*:*:long_term_support:*:*:*11.0 update15VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update16:*:*:long_term_support:*:*:*11.0 update16VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update17:*:*:long_term_support:*:*:*11.0 update17VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update18:*:*:long_term_support:*:*:*11.0 update18VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update19:*:*:long_term_support:*:*:*11.0 update19VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update2:*:*:long_term_support:*:*:*11.0 update2VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update20:*:*:long_term_support:*:*:*11.0 update20VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update21:*:*:long_term_support:*:*:*11.0 update21VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update22:*:*:long_term_support:*:*:*11.0 update22VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update23:*:*:long_term_support:*:*:*11.0 update23VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update24:*:*:long_term_support:*:*:*11.0 update24VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update25:*:*:long_term_support:*:*:*11.0 update25VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update26:*:*:long_term_support:*:*:*11.0 update26VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update27:*:*:long_term_support:*:*:*11.0 update27VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update3:*:*:long_term_support:*:*:*11.0 update3VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update4:*:*:long_term_support:*:*:*11.0 update4VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update5:*:*:long_term_support:*:*:*11.0 update5VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update6:*:*:long_term_support:*:*:*11.0 update6VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update7:*:*:long_term_support:*:*:*11.0 update7VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update8:*:*:long_term_support:*:*:*11.0 update8VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:11.0:update9:*:*:long_term_support:*:*:*11.0 update9VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:-:*:*:long_term_support:*:*:*12.0VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update1:*:*:long_term_support:*:*:*12.0 update1VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update10:*:*:long_term_support:*:*:*12.0 update10VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update11:*:*:long_term_support:*:*:*12.0 update11VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update12:*:*:long_term_support:*:*:*12.0 update12VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update13:*:*:long_term_support:*:*:*12.0 update13VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update14:*:*:long_term_support:*:*:*12.0 update14VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update15:*:*:long_term_support:*:*:*12.0 update15VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update16:*:*:long_term_support:*:*:*12.0 update16VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update17:*:*:long_term_support:*:*:*12.0 update17VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update18:*:*:long_term_support:*:*:*12.0 update18VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update19:*:*:long_term_support:*:*:*12.0 update19VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update2:*:*:long_term_support:*:*:*12.0 update2VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update20:*:*:long_term_support:*:*:*12.0 update20VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update21:*:*:long_term_support:*:*:*12.0 update21VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update3:*:*:long_term_support:*:*:*12.0 update3VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update4:*:*:long_term_support:*:*:*12.0 update4VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update5:*:*:long_term_support:*:*:*12.0 update5VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update6:*:*:long_term_support:*:*:*12.0 update6VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update7:*:*:long_term_support:*:*:*12.0 update7VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update8:*:*:long_term_support:*:*:*12.0 update8VulnerableTrendmicro
cpe:2.3:a:trendmicro:deep_security_agent:12.0:update9:*:*:long_term_support:*:*:*12.0 update9VulnerableTrendmicro
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update17:*:*:long_term_support:*:*:* Versions 10.0 update17 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update18:*:*:long_term_support:*:*:* Versions 10.0 update18 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update19:*:*:long_term_support:*:*:* Versions 10.0 update19 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update2:*:*:long_term_support:*:*:* Versions 10.0 update2 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update20:*:*:long_term_support:*:*:* Versions 10.0 update20 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update21:*:*:long_term_support:*:*:* Versions 10.0 update21 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update22:*:*:long_term_support:*:*:* Versions 10.0 update22 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update23:*:*:long_term_support:*:*:* Versions 10.0 update23 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update24:*:*:long_term_support:*:*:* Versions 10.0 update24 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update25:*:*:long_term_support:*:*:* Versions 10.0 update25 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update26:*:*:long_term_support:*:*:* Versions 10.0 update26 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update27:*:*:long_term_support:*:*:* Versions 10.0 update27 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update28:*:*:long_term_support:*:*:* Versions 10.0 update28 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update29:*:*:long_term_support:*:*:* Versions 10.0 update29 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update3:*:*:long_term_support:*:*:* Versions 10.0 update3 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update30:*:*:long_term_support:*:*:* Versions 10.0 update30 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update31:*:*:long_term_support:*:*:* Versions 10.0 update31 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update4:*:*:long_term_support:*:*:* Versions 10.0 update4 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update5:*:*:long_term_support:*:*:* Versions 10.0 update5 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update6:*:*:long_term_support:*:*:* Versions 10.0 update6 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update7:*:*:long_term_support:*:*:* Versions 10.0 update7 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update8:*:*:long_term_support:*:*:* Versions 10.0 update8 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:10.0:update9:*:*:long_term_support:*:*:* Versions 10.0 update9 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:-:*:*:long_term_support:*:*:* Versions 11.0 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update1:*:*:long_term_support:*:*:* Versions 11.0 update1 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update10:*:*:long_term_support:*:*:* Versions 11.0 update10 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update11:*:*:long_term_support:*:*:* Versions 11.0 update11 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update12:*:*:long_term_support:*:*:* Versions 11.0 update12 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update13:*:*:long_term_support:*:*:* Versions 11.0 update13 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update14:*:*:long_term_support:*:*:* Versions 11.0 update14 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update15:*:*:long_term_support:*:*:* Versions 11.0 update15 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update16:*:*:long_term_support:*:*:* Versions 11.0 update16 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update17:*:*:long_term_support:*:*:* Versions 11.0 update17 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update18:*:*:long_term_support:*:*:* Versions 11.0 update18 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update19:*:*:long_term_support:*:*:* Versions 11.0 update19 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update2:*:*:long_term_support:*:*:* Versions 11.0 update2 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update20:*:*:long_term_support:*:*:* Versions 11.0 update20 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update21:*:*:long_term_support:*:*:* Versions 11.0 update21 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update22:*:*:long_term_support:*:*:* Versions 11.0 update22 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update23:*:*:long_term_support:*:*:* Versions 11.0 update23 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update24:*:*:long_term_support:*:*:* Versions 11.0 update24 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update25:*:*:long_term_support:*:*:* Versions 11.0 update25 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update26:*:*:long_term_support:*:*:* Versions 11.0 update26 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update27:*:*:long_term_support:*:*:* Versions 11.0 update27 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update3:*:*:long_term_support:*:*:* Versions 11.0 update3 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update4:*:*:long_term_support:*:*:* Versions 11.0 update4 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update5:*:*:long_term_support:*:*:* Versions 11.0 update5 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update6:*:*:long_term_support:*:*:* Versions 11.0 update6 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update7:*:*:long_term_support:*:*:* Versions 11.0 update7 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update8:*:*:long_term_support:*:*:* Versions 11.0 update8 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:11.0:update9:*:*:long_term_support:*:*:* Versions 11.0 update9 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:-:*:*:long_term_support:*:*:* Versions 12.0 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update1:*:*:long_term_support:*:*:* Versions 12.0 update1 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update10:*:*:long_term_support:*:*:* Versions 12.0 update10 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update11:*:*:long_term_support:*:*:* Versions 12.0 update11 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update12:*:*:long_term_support:*:*:* Versions 12.0 update12 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update13:*:*:long_term_support:*:*:* Versions 12.0 update13 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update14:*:*:long_term_support:*:*:* Versions 12.0 update14 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update15:*:*:long_term_support:*:*:* Versions 12.0 update15 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update16:*:*:long_term_support:*:*:* Versions 12.0 update16 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update17:*:*:long_term_support:*:*:* Versions 12.0 update17 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update18:*:*:long_term_support:*:*:* Versions 12.0 update18 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update19:*:*:long_term_support:*:*:* Versions 12.0 update19 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update2:*:*:long_term_support:*:*:* Versions 12.0 update2 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update20:*:*:long_term_support:*:*:* Versions 12.0 update20 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update21:*:*:long_term_support:*:*:* Versions 12.0 update21 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update3:*:*:long_term_support:*:*:* Versions 12.0 update3 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update4:*:*:long_term_support:*:*:* Versions 12.0 update4 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update5:*:*:long_term_support:*:*:* Versions 12.0 update5 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update6:*:*:long_term_support:*:*:* Versions 12.0 update6 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update7:*:*:long_term_support:*:*:* Versions 12.0 update7 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update8:*:*:long_term_support:*:*:* Versions 12.0 update8 Vulnerable ·Trendmicro
  • cpe:2.3:a:trendmicro:deep_security_agent:12.0:update9:*:*:long_term_support:*:*:* Versions 12.0 update9 Vulnerable ·Trendmicro
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-23120
  2. 2026-10-03 Alias added: GHSA-gpqg-9388-qcwr

References

Exploit 1

Patch 1

  • TI-2025-34668 OS command injection in Trend Micro Apex One KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-10115 Insufficient verification of data authenticity in Trend Micro Apex Central KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-06895 Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-14867 Unrestricted file upload in Trend Micro Apex One KEVCVSS 3.1HIGH 8.8
  • TI-2020-06795 Injection in Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free… KEVCVSS 3.1HIGH 8.8
  • TI-2020-06794 A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a… KEVCVSS 3.1HIGH 8.8
See all 603 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences