CVE-2020-28581: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges...

Trend Micro Worry-Free Business Security: Path traversal vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and e-mail protection. A path traversal arbitrary remote file deletion vulnerability exists in Trend Mic...

PT-2020-17016

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Description A vulnerability could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege...

PT-2020-5819

Name of the Vulnerable Software and Affected Versions: Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance could allow an unauthenticated, remote attacker to send a specially crafted HTTP message...

PT-2020-17019

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 Description A vulnerability could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges...

PT-2020-17017

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security version 10 SP1 Description A path traversal vulnerability could allow an unauthenticated attacker to modify or delete arbitrary files on the product's management console. This issue affects the manageme...

Trend Micro OfficeScan XG and Trend Micro Apex One have information leakage vulnerabilities

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

Trend Micro Security 2020 code-related vulnerabilities

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer suffers from a local elevation of privilege vulnerability that can be exploited by an attacker by placing a malicious DLL in a local directory, which can lead to...

Trend Micro Security 2020 Postback Link Vulnerability

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer has a security vulnerability that can be exploited by an attacker by placing a malicious DLL in an unprotected location and high privileges symbolic link attack, whic...

Trend Micro Apex One information leakage vulnerability

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

Trend Micro Apex One security vulnerabilities

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. An access control error vulnerability exists in Trend Micro Apex One, which can be exploited by an attacker to allow an unprivileged user t...

Trend Micro Security 2020 Security Vulnerabilities

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer contains a security vulnerability that can be exploited by an attacker to gain administrative privileges during product installation by placing a specific Windows...

Trend Micro OfficeScan XG information leakage vulnerability

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

CVE-2020-25833

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack...

CVE-2020-25832

Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Reflected XSS attack...

CVE-2020-25832

Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Reflected XSS attack...

CVE-2020-25833

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack...

CVE-2020-11851

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code...

Cross site scripting

Persistent cross-Site Scripting vulnerability on Micro Focus IDOL product, affecting all version prior to version 12.7. The vulnerability could be exploited to perform Persistent XSS attack...

Cross site scripting

Reflected Cross Site scripting vulnerability on Micro Focus Filr product, affecting version 4.2.1. The vulnerability could be exploited to perform Reflected XSS attack...