2788 matches found
CVE-2020-8467
A migration tool component of Trend Micro Apex One 2019 and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations RCE. An attempted attack requires user authentication...
PT-2020-20230
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions 2019 Trend Micro OfficeScan XG server Description The issue concerns a vulnerable EXE file in Trend Micro Apex One and OfficeScan XG server, allowing a remote attacker to write arbitrary data to any path on affect...
CVE-2020-8467: Undefined Security Weakness
A migration tool component of Trend Micro Apex One 2019 and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations RCE. An attempted attack requires user authentication...
CVE-2020-8468: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication...
CVE-2020-8599: Undefined Security Weakness
Trend Micro Apex One 2019 and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability...
CVE-2020-8468
Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication. Recent...
CVE-2020-8598: Missing Authentication for Critical Function
Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit thi...
CVE-2020-8467
A migration tool component of Trend Micro Apex One 2019 and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations RCE. An attempted attack requires user authentication. Recent assessments: Assessed Attacker Value: 0 Assessed...
CVE-2020-8470: Undefined Security Weakness
Trend Micro Apex One 2019, OfficeScan XG and Worry-Free Business Security 9.0, 9.5, 10.0 server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability...
Trend Micro Apex One and OfficeScan XG Arbitrary Code Execution
Binary data 701274.prm...
PT-2020-1851
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One version 2019 Trend Micro OfficeScan XG Description The vulnerability in the migration tool component of Trend Micro Apex One and OfficeScan could allow remote attackers to execute arbitrary code on affected installations...
PT-2020-1850
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One version 2019 Trend Micro OfficeScan XG versions 9.0 through 10.0 Trend Micro Worry-Free Business Security versions 9.0 through 10.0 Description A content validation escape vulnerability exists in the affected products, whi...
VulnCheck KEV: CVE-2020-8467
Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution...
VulnCheck KEV: CVE-2020-8468
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components...
VulnCheck KEV: CVE-2019-9489
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan versions XG and 11.0, and Worry-Free Business Security versions 10.0, 9.5 and 9.0 could allow an attacker to modify arbitrary files on the affected product's management console...
The Summit of Cybersecurity Sits Among the Clouds
Trend Micro Apex One as a Service You have heard it before, but it needs to be said again—threats are constantly evolving and getting sneakier, more malicious, and harder to find than ever before. It’s a hard job to stay one step ahead of the latest threats and scams organizations come across, bu...
Trend Micro Apex One and Trend Micro OfficeScan XG Credential Key Exposure Vulnerability
Trend Micro OfficeScan XG and Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a suite of distributed anti-virus software, and Apex One is a suite of endpoint security protection software that provides automated threat detection and response capabilities. A security...
Trend Micro Apex One Cross-Site Scripting Vulnerability
Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. A cross-site scripting vulnerability exists in the product console in Trend Micro Apex One 2019. The vulnerability stems from a lack of...
