Trend Micro Apex One and OfficeScan XG Arbitrary Code Execution

Binary data 701274.prm...

PT-2020-1850

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One version 2019 Trend Micro OfficeScan XG versions 9.0 through 10.0 Trend Micro Worry-Free Business Security versions 9.0 through 10.0 Description A content validation escape vulnerability exists in the affected products, whi...

PT-2020-6112

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Trend Micro Worry-Free Business Security 10 SP1 affected versions not specified Trend Micro Worry-Free Business Security Service...

Trend Micro Apex One and Trend Micro OfficeScan XG Credential Key Exposure Vulnerability

Trend Micro OfficeScan XG and Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a suite of distributed anti-virus software, and Apex One is a suite of endpoint security protection software that provides automated threat detection and response capabilities. A security...

CVE-2019-19691

A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability...

CVE-2019-19691

A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability...

CVE-2019-19691

The CVE-2019-19691 vulnerability affects Trend Micro Apex One and OfficeScan XG, enabling an information-disclosure of a masked credential key by manipulating page elements with development tools. The attacker must already possess admin/root privileges on the product console to exploit this. Mult...

CVE-2019-19691: Undefined Security Weakness

A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools. Note that the attacker must already have admin/root privileges on the product console to exploit this vulnerability...

PT-2019-15915

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One and OfficeScan XG affected versions not specified Description A vulnerability could allow an attacker to expose a masked credential key by manipulating page elements using development tools. The attacker must already have...

CVE-2018-18332

A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations...

Design/Logic Flaw

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...

CVE-2018-18332

A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations...

Design/Logic Flaw

A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations...

CVE-2018-18331

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...

CVE-2018-18332

CVE-2018-18332 affects Trend Micro OfficeScan XG; weak file permissions could let an attacker manipulate key file permissions to modify other files and folders on vulnerable installations. CVSSv3 shows HIGH impact (7.5) with network access and no authentication; no remediation details are provide...

CVE-2018-18331

CVE-2018-18331 affects Trend Micro OfficeScan XG. The vulnerability is described as weak file permissions on a particular folder for a specific group, allowing an attacker to alter files and potentially enable further exploits on vulnerable installations. The available connected documents reitera...

CVE-2018-18332: Incorrect Permission Assignment for Critical Resource

A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations...

PT-2018-14413

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan XG affected versions not specified Description A weak file permissions issue in a particular folder for a specific group may allow an attacker to modify files, potentially leading to further exploits on vulnerable...

PT-2018-14414

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan XG affected versions not specified Description A weak file permissions issue may allow an attacker to manipulate permissions on key files, potentially enabling them to modify other files and folders on vulnerable...

CVE-2018-18331: Incorrect Permission Assignment for Critical Resource

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...