PT-2021-16477

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem version not specified OfficeScan XG version SP1 Worry-Free Business Security version 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about x86 agent...

PT-2021-16483

Name of the Vulnerable Software and Affected Versions: Worry-Free Business Security version 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain various pieces of settings information. Recommendations: For Worry-Free Business Security version 10.0...

PT-2021-16471

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain information about a specific configuration download file...

PT-2021-16476

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan XG version SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description: An improper access control information disclosure issue could allow an unauthenticated user to obtain information about an agent's...

PT-2021-16481

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS OfficeScan XG SP1 Worry-Free Business Security 10.0 SP1 Description: An improper access control issue could allow an unauthenticated user to obtain patch level information. Recommendations: For Trend Micr...

PT-2021-16484

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Trend Micro Worry-Free Business Security affected versions no...

Trend Micro Worry-Free Business Security Path Traversal Arbitrary Remote File Deletion Vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and e-mail protection. A path traversal arbitrary remote file deletion vulnerability exists in Trend Mic...

CVE-2020-28574

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console...

CVE-2020-28574

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console...

CVE-2020-28574

Trend Micro Worry-Free Business Security 10 SP1. The CVE describes an unauthenticated path traversal vulnerability that could allow an attacker to delete or modify arbitrary files on the product’s management console. The connected documents confirm the vulnerability type and impact but do not pro...

CVE-2020-28574: Improper Limitation of a Pathname to a Restricted Directory

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console...

PT-2020-17017

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security version 10 SP1 Description A path traversal vulnerability could allow an unauthenticated attacker to modify or delete arbitrary files on the product's management console. This issue affects the manageme...

Trend Micro Worry-Free Business Security 路径遍历漏洞

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and e-mail protection. A path traversal arbitrary remote file deletion vulnerability exists in Trend Mic...

CVE-2020-24557

A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first...

CVE-2020-24556

A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and...

CVE-2020-24558

A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execut...

CVE-2020-24557

A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first...

CVE-2020-24558

A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execut...

Out-of-bounds

A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execut...

Design/Logic Flaw

A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first...