Trendmicro Officescan
71 CVEs affecting Trendmicro Officescan. Latest disclosed: 2021-08-04. Critical: 8, High: 28.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8599 | Critical | 9.8 | 2020-03-18 | Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary p… |
CVE-2020-8598 | Critical | 9.8 | 2020-03-18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a r… |
CVE-2019-18189 | Critical | 9.8 | 2019-10-28 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass… |
CVE-2018-3608 | Critical | 9.8 | 2018-07-06 | A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to crea… |
CVE-2017-14089 | Critical | 9.8 | 2017-10-06 | An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan serv… |
CVE-2017-11394 | Critical | 9.8 | 2017-08-03 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. T… |
CVE-2017-11393 | Critical | 9.8 | 2017-08-03 | Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. T… |
CVE-2008-2433 | Critical | 9.8 | 2008-08-27 | The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Server/Messaging Suite 3.5 and 3.6 creates a… |
CVE-2021-32465 | High | 8.8 | 2021-08-04 | An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an… |
CVE-2021-36741 | High | 8.8 | 2021-07-29 | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a re… |
CVE-2020-8468 | High | 8.8 | 2020-03-18 | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability w… |
CVE-2020-8467 | High | 8.8 | 2020-03-18 | A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary co… |
CVE-2018-10509 | High | 8.8 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An att… |
CVE-2018-10508 | High | 8.8 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable in… |
CVE-2017-5481 | High | 8.8 | 2017-05-03 | Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted… |
CVE-2017-14084 | High | 8.1 | 2017-10-06 | A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable ins… |
CVE-2021-32464 | High | 7.8 | 2021-08-04 | An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services… |
CVE-2021-36742 | High | 7.8 | 2021-07-29 | A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a loca… |
CVE-2021-28645 | High | 7.8 | 2021-04-13 | An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate… |
CVE-2021-25253 | High | 7.8 | 2021-04-13 | An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service cou… |