Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-9489
HistoryApr 05, 2019 - 11:29 p.m.

CVE-2019-9489

2019-04-0523:29:00
CWE-22
[email protected]
web.nvd.nist.gov
1

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

42.8%

JSON

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affected product’s management console.

Affected configurations

Nvd
Node
trendmicroapex_oneRange≤b1066
OR
trendmicroapex_one_as_a_serviceRange<2019-03-27
OR
trendmicrobusiness_securityMatch9.0sp3
OR
trendmicroofficescanMatch11.0sp1
OR
trendmicroofficescanMatchxg
OR
trendmicroofficescanMatchxgsp1
OR
trendmicroworry-free_business_securityMatch9.5
OR
trendmicroworry-free_business_securityMatch10.0
AND
microsoftwindowsMatch-
VendorProductVersionCPE
trendmicroapex_one*cpe:2.3:a:trendmicro:apex_one:*:*:*:*:*:*:*:*
trendmicroapex_one_as_a_service*cpe:2.3:a:trendmicro:apex_one_as_a_service:*:*:*:*:*:*:*:*
trendmicrobusiness_security9.0cpe:2.3:a:trendmicro:business_security:9.0:sp3:*:*:*:*:*:*
trendmicroofficescan11.0cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*
trendmicroofficescanxgcpe:2.3:a:trendmicro:officescan:xg:*:*:*:*:*:*:*
trendmicroofficescanxgcpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*
trendmicroworry-free_business_security9.5cpe:2.3:a:trendmicro:worry-free_business_security:9.5:*:*:*:*:*:*:*
trendmicroworry-free_business_security10.0cpe:2.3:a:trendmicro:worry-free_business_security:10.0:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Related

nessus 2
cve 1
prion 1
cvelist 1
nessus
nessus
Trend Micro Worry-Free Business Security (WFBS) Directory Traversal Vulnerability (1122250)
2020-03-06 00:00:00
Trend Micro OfficeScan Directory Traversal Vulnerability (1122250)
2020-01-24 00:00:00
cve
cve
CVE-2019-9489
2019-04-05 23:29:00
prion
prion
Directory traversal
2019-04-05 23:29:00
cvelist
cvelist
CVE-2019-9489
2019-04-05 22:46:14

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

42.8%

JSON
Related for NVD:CVE-2019-9489
nessus2cve1prion1cvelist1