[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLitYQzH03W9H2FpeZP8GAm8wcqWvppPvoG5BpuL7Gi0":3,"g5a-family:trendmicro\u002Fofficescan":146,"g5a-ex:trendmicro\u002Fofficescan@*":160},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":93,"seoMetadata":124,"meta":143},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":31},"trendmicro","officescan",6,71,"2021-08-04",[13,17,22,24,26,28],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},"11.0",25,1,{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},"12.0",12,0,false,{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},"7.0",{"version":25,"cve_count":20,"kev_count":20,"has_kev":21},"7.3",{"version":27,"cve_count":16,"kev_count":20,"has_kev":21},"8.0",{"version":29,"cve_count":30,"kev_count":9,"has_kev":4},"xg",53,"Officescan by Trendmicro is a technology product with 6 tracked versions and 71 known security vulnerabilities including 6 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},{"version":25,"cve_count":20,"kev_count":20,"has_kev":21},{"version":27,"cve_count":16,"kev_count":20,"has_kev":21},{"version":29,"cve_count":30,"kev_count":9,"has_kev":4},[40,48,56,60,65,69,74,79,85,89],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":21,"epssScore":47},"CVE-2017-11394","Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.","2017-08-03",9.8,"v3.0","Critical",0.66774,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":4,"epssScore":55},"CVE-2019-18187","Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.","2019-10-28",7.5,"v3.1","High",0.25125,{"cveId":57,"description":58,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":21,"epssScore":59},"CVE-2017-11393","Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.",0.15887,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":44,"cvssVersion":53,"severity":46,"isKev":21,"epssScore":64},"CVE-2020-8598","Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.","2020-03-18",0.1324,{"cveId":66,"description":67,"publishedDate":63,"cvssScore":44,"cvssVersion":53,"severity":46,"isKev":4,"epssScore":68},"CVE-2020-8599","Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.",0.11858,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":44,"cvssVersion":53,"severity":46,"isKev":21,"epssScore":73},"CVE-2008-2433","The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client\u002FServer\u002FMessaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks.  NOTE: this can be leveraged for code execution through an unspecified \"manipulation of the configuration.\"","2008-08-27",0.10929,{"cveId":75,"description":76,"publishedDate":63,"cvssScore":77,"cvssVersion":53,"severity":54,"isKev":4,"epssScore":78},"CVE-2020-8467","A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.",8.8,0.109,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":45,"severity":54,"isKev":21,"epssScore":84},"CVE-2017-14084","A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.","2017-10-06",8.1,0.10128,{"cveId":86,"description":87,"publishedDate":82,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":21,"epssScore":88},"CVE-2017-14089","An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues.",0.09779,{"cveId":90,"description":91,"publishedDate":82,"cvssScore":52,"cvssVersion":45,"severity":54,"isKev":21,"epssScore":92},"CVE-2017-14087","A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages.",0.08328,[94,99,102,108,111,118],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"severity":54,"isKev":4,"epssScore":55,"cisaVulnName":95,"cisaDateAdded":96,"cisaShortDescription":97,"cisaRequiredAction":98},"Trend Micro OfficeScan Directory Traversal Vulnerability","2021-11-03","Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.","Apply updates per vendor instructions.",{"cveId":75,"description":76,"publishedDate":63,"cvssScore":77,"severity":54,"isKev":4,"epssScore":78,"cisaVulnName":100,"cisaDateAdded":96,"cisaShortDescription":101,"cisaRequiredAction":98},"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.",{"cveId":103,"description":104,"publishedDate":63,"cvssScore":77,"severity":54,"isKev":4,"epssScore":105,"cisaVulnName":106,"cisaDateAdded":96,"cisaShortDescription":107,"cisaRequiredAction":98},"CVE-2020-8468","Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.",0.06165,"Trend Micro Multiple Products Content Validation Escape Vulnerability","Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.",{"cveId":66,"description":67,"publishedDate":63,"cvssScore":44,"severity":46,"isKev":4,"epssScore":68,"cisaVulnName":109,"cisaDateAdded":96,"cisaShortDescription":110,"cisaRequiredAction":98},"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login.",{"cveId":112,"description":113,"publishedDate":114,"cvssScore":77,"severity":54,"isKev":4,"epssScore":115,"cisaVulnName":116,"cisaDateAdded":96,"cisaShortDescription":117,"cisaRequiredAction":98},"CVE-2021-36741","An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.","2021-07-29",0.04951,"Trend Micro Multiple Products Improper Input Validation Vulnerability","Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.",{"cveId":119,"description":120,"publishedDate":114,"cvssScore":121,"severity":54,"isKev":4,"epssScore":122,"cisaVulnName":116,"cisaDateAdded":96,"cisaShortDescription":123,"cisaRequiredAction":98},"CVE-2021-36742","A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",7.8,0.01482,"Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.",{"title":125,"metaDescription":126,"keywords":127,"structuredData":128},"Officescan by Trendmicro - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Officescan by Trendmicro covering 6 versions with 71 tracked vulnerabilities including 1 critical and 5 high-severity issues and 6 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Officescan vulnerabilities, Officescan security, Officescan CVE, Trendmicro Officescan, Officescan threat intelligence, Trendmicro security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Officescan KEV, Officescan exploited vulnerabilities",{"@context":129,"@type":130,"name":131,"description":126,"url":132,"manufacturer":133,"applicationCategory":137,"softwareVersion":138,"mainEntity":139},"https:\u002F\u002Fschema.org","SoftwareApplication","Officescan","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftrendmicro\u002Fofficescan",{"@type":134,"name":135,"url":136},"Organization","Trendmicro","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrendmicro","Security Software","6 versions tracked",{"@type":140,"name":141,"description":142,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Officescan Security Vulnerabilities","Security vulnerabilities affecting Officescan by Trendmicro",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":144,"apiVersion":145},"2026-10-18T00:58:34.657Z","3.0",[147,150,153,156,158],{"product":148,"cves":149},"officescan_cloud",4,{"product":151,"cves":152},"officescan_business_security",3,{"product":154,"cves":155},"officescan_xg",2,{"product":157,"cves":16},"officescan_business_security_service",{"product":159,"cves":16},"officescan_monthly",{"rows":161,"total":9,"capped":21,"failed":20},[162,168,172,176,180,184],{"cveId":49,"name":95,"severity":54,"cvss":52,"added":96,"epss":55,"published":163,"ranges":164,"checked":4,"hits":167,"covers":21},"2019-10-28T20:15:11.003",[29,165,166],"xg-sp1","11.0-sp1",[],{"cveId":75,"name":100,"severity":54,"cvss":77,"added":96,"epss":78,"published":169,"ranges":170,"checked":4,"hits":171,"covers":21},"2020-03-18T01:15:11.927",[29,165],[],{"cveId":103,"name":106,"severity":54,"cvss":77,"added":96,"epss":105,"published":173,"ranges":174,"checked":4,"hits":175,"covers":21},"2020-03-18T01:15:12.003",[29,165],[],{"cveId":66,"name":109,"severity":46,"cvss":44,"added":96,"epss":68,"published":177,"ranges":178,"checked":4,"hits":179,"covers":21},"2020-03-18T01:15:12.223",[29,165],[],{"cveId":112,"name":116,"severity":54,"cvss":77,"added":96,"epss":115,"published":181,"ranges":182,"checked":4,"hits":183,"covers":21},"2021-07-29T20:15:07.62",[165],[],{"cveId":119,"name":116,"severity":54,"cvss":121,"added":96,"epss":122,"published":185,"ranges":186,"checked":4,"hits":187,"covers":21},"2021-07-29T20:15:07.65",[165],[]]