OF
Product
Officescan
On CISA KEVExploited in the wild
71
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 28Medium 33Low 0
Watch
Add Officescan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25236 | 5.3 | Feb 4 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25235 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content… Affected: xg |
| CVE-2021-25234 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25233 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25232 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL… Affected: xg |
| CVE-2021-25231 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2021-25230 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the… Affected: xg |
| CVE-2021-25229 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the… Affected: xg |
| CVE-2021-25228 | 5.3 | Feb 4 | An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated… Affected: xg |
| CVE-2020-28583 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28582 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28577 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28576 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2020-28573 | 5.3 | Dec 1 | An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server… Affected: xg |
| CVE-2017-14085 | 5.3 | Oct 6 | Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain… Affected: 11.0; 12.0 |
| CVE-2016-1223 | 5.3 | Jun 19 | Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read… Affected: 11.0 |
| CVE-2019-19691 | 4.9 | Dec 20 | A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by manipulating page elements using development tools Affected: xg |
| CVE-2018-10506 | 4.7 | Jun 8 | A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to disclose sensitive information on vulnerable… Affected: 11.0; xg; xg |
| CVE-2018-10507 | 4.4 | Jun 12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention… Affected: 11.0; xg; xg |
| CVE-2010-0564 | – | Feb 10 | Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a… Affected: through 8.0 |
| CVE-2009-1435 | – | Apr 27 | NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames Affected: 8.0 |