[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSSvueBvAOLev2XrbmUXAlHENay9bSHMkw3nOgsjzz4M":3,"g5a-family:trendmicro\u002Fworry-free_business_security":141,"g5a-ex:trendmicro\u002Fworry-free_business_security@*":145},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":92,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":29},"trendmicro","worry-free_business_security",5,57,"2023-09-19",[13,16,21,23,26],{"version":14,"cve_count":15,"kev_count":9,"has_kev":4},"10.0",52,{"version":17,"cve_count":18,"kev_count":19,"has_kev":20},"10.1",1,0,false,{"version":22,"cve_count":18,"kev_count":19,"has_kev":20},"5.0",{"version":24,"cve_count":25,"kev_count":18,"has_kev":4},"9.0",6,{"version":27,"cve_count":28,"kev_count":18,"has_kev":4},"9.5",7,"Worry-free Business Security by Trendmicro is a technology product with 5 tracked versions and 57 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35],{"version":14,"cve_count":15,"kev_count":9,"has_kev":4},{"version":17,"cve_count":18,"kev_count":19,"has_kev":20},{"version":22,"cve_count":18,"kev_count":19,"has_kev":20},{"version":24,"cve_count":25,"kev_count":18,"has_kev":4},{"version":27,"cve_count":28,"kev_count":18,"has_kev":4},[37,45,50,56,61,66,71,76,80,87],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":20,"epssScore":44},"CVE-2020-8598","Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.","2020-03-18",9.8,"v3.1","Critical",0.1324,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":20,"epssScore":49},"CVE-2008-2433","The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client\u002FServer\u002FMessaging Suite 3.5 and 3.6 creates a random session token based only on the login time, which makes it easier for remote attackers to hijack sessions via brute-force attacks.  NOTE: this can be leveraged for code execution through an unspecified \"manipulation of the configuration.\"","2008-08-27",0.10929,{"cveId":51,"description":52,"publishedDate":40,"cvssScore":53,"cvssVersion":42,"severity":54,"isKev":4,"epssScore":55},"CVE-2020-8468","Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.",8.8,"High",0.06165,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":53,"cvssVersion":42,"severity":54,"isKev":4,"epssScore":60},"CVE-2021-36741","An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.","2021-07-29",0.04951,{"cveId":62,"description":63,"publishedDate":40,"cvssScore":64,"cvssVersion":42,"severity":54,"isKev":20,"epssScore":65},"CVE-2020-8470","Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.",7.5,0.04584,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":20,"epssScore":70},"CVE-2019-18189","A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication.","2019-10-28",0.04538,{"cveId":72,"description":73,"publishedDate":11,"cvssScore":74,"cvssVersion":42,"severity":54,"isKev":4,"epssScore":75},"CVE-2023-41179","A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.",7.2,0.04251,{"cveId":77,"description":78,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":20,"epssScore":79},"CVE-2020-8600","Trend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal vulnerability that could allow an attacker to manipulate a key file to bypass authentication.",0.04179,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":42,"severity":85,"isKev":20,"epssScore":86},"CVE-2016-1223","Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors.","2016-06-19",5.3,"Medium",0.04168,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":64,"cvssVersion":42,"severity":54,"isKev":20,"epssScore":91},"CVE-2020-28574","A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console.","2020-11-18",0.02807,[93,98,108,111,114],{"cveId":72,"description":73,"publishedDate":11,"cvssScore":74,"severity":54,"isKev":4,"epssScore":75,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":97},"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","2023-09-21","Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"severity":54,"isKev":4,"epssScore":103,"cisaVulnName":104,"cisaDateAdded":105,"cisaShortDescription":106,"cisaRequiredAction":107},"CVE-2020-24557","A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.","2020-09-01",7.8,0.02666,"Trend Micro Multiple Products Improper Access Control Vulnerability","2021-11-03","Trend Micro Apex One, OfficeScan, and Worry-Free Business Security on Microsoft Windows contain an improper access control vulnerability that may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function, and attain privilege escalation.","Apply updates per vendor instructions.",{"cveId":51,"description":52,"publishedDate":40,"cvssScore":53,"severity":54,"isKev":4,"epssScore":55,"cisaVulnName":109,"cisaDateAdded":105,"cisaShortDescription":110,"cisaRequiredAction":107},"Trend Micro Multiple Products Content Validation Escape Vulnerability","Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components.",{"cveId":57,"description":58,"publishedDate":59,"cvssScore":53,"severity":54,"isKev":4,"epssScore":60,"cisaVulnName":112,"cisaDateAdded":105,"cisaShortDescription":113,"cisaRequiredAction":107},"Trend Micro Multiple Products Improper Input Validation Vulnerability","Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.",{"cveId":115,"description":116,"publishedDate":59,"cvssScore":102,"severity":54,"isKev":4,"epssScore":117,"cisaVulnName":112,"cisaDateAdded":105,"cisaShortDescription":118,"cisaRequiredAction":107},"CVE-2021-36742","A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",0.01482,"Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.",{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Worry-free Business Security by Trendmicro - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Worry-free Business Security by Trendmicro covering 5 versions with 57 tracked vulnerabilities including 0 critical and 5 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Worry-free Business Security vulnerabilities, Worry-free Business Security security, Worry-free Business Security CVE, Trendmicro Worry-free Business Security, Worry-free Business Security threat intelligence, Trendmicro security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Worry-free Business Security KEV, Worry-free Business Security exploited vulnerabilities",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Worry-free Business Security","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftrendmicro\u002Fworry-free_business_security",{"@type":129,"name":130,"url":131},"Organization","Trendmicro","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrendmicro","Security Software","5 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Worry-free Business Security Security Vulnerabilities","Security vulnerabilities affecting Worry-free Business Security by Trendmicro",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":139,"apiVersion":140},"2026-10-17T00:02:46.890Z","3.0",[142],{"product":143,"cves":144},"worry-free_business_security_services",25,{"rows":146,"total":9,"capped":20,"failed":19},[147,152,156,161,165],{"cveId":72,"name":94,"severity":54,"cvss":74,"added":95,"epss":75,"published":148,"ranges":149,"checked":4,"hits":151,"covers":20},"2023-09-19T14:15:21.343",[150],"10.0-sp1",[],{"cveId":99,"name":104,"severity":54,"cvss":102,"added":105,"epss":103,"published":153,"ranges":154,"checked":4,"hits":155,"covers":20},"2020-09-01T19:15:11.87",[150],[],{"cveId":51,"name":109,"severity":54,"cvss":53,"added":105,"epss":55,"published":157,"ranges":158,"checked":4,"hits":160,"covers":20},"2020-03-18T01:15:12.003",[159,27,14,150],"9.0-sp3",[],{"cveId":57,"name":112,"severity":54,"cvss":53,"added":105,"epss":60,"published":162,"ranges":163,"checked":4,"hits":164,"covers":20},"2021-07-29T20:15:07.62",[150],[],{"cveId":115,"name":112,"severity":54,"cvss":102,"added":105,"epss":117,"published":166,"ranges":167,"checked":4,"hits":168,"covers":20},"2021-07-29T20:15:07.65",[150],[]]