[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fE7aWkt4YuzZ6p8c1WFv_F3Tpb1ik_l4whxJc0ll5SBo":3,"g5a-family:trendmicro\u002Fworry-free_business_security_services":106,"g5a-ex:trendmicro\u002Fworry-free_business_security_services@*":107},{"success":4,"data":5},true,{"product":6,"versions":19,"topVulnerabilitiesByEpss":21,"kevVulnerabilities":78,"seoMetadata":84,"meta":103},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":18},"trendmicro","worry-free_business_security_services",1,25,"2025-07-10",[13],{"version":14,"cve_count":15,"kev_count":16,"has_kev":17},"5.0",2,0,false,"Worry-free Business Security Services by Trendmicro is a technology product with 1 tracked version and 25 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[20],{"version":14,"cve_count":15,"kev_count":16,"has_kev":17},[22,30,37,43,48,53,59,63,68,73],{"cveId":23,"description":24,"publishedDate":25,"cvssScore":26,"cvssVersion":27,"severity":28,"isKev":4,"epssScore":29},"CVE-2023-41179","A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.\r\n\r\nNote that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.","2023-09-19",7.2,"v3.1","High",0.04251,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":27,"severity":35,"isKev":17,"epssScore":36},"CVE-2016-1223","Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors.","2016-06-19",5.3,"Medium",0.04168,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":42},"CVE-2022-24678","An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow an attacker to flood a temporary log location and consume all disk space on affected installations.","2022-02-24",7.5,0.02335,{"cveId":44,"description":45,"publishedDate":33,"cvssScore":46,"cvssVersion":27,"severity":35,"isKev":17,"epssScore":47},"CVE-2016-1224","CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.",6.1,0.01589,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":41,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":52},"CVE-2021-23139","A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations.","2021-10-21",0.0111,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":58},"CVE-2020-24559","A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.","2020-09-01",7.8,0.00795,{"cveId":60,"description":61,"publishedDate":56,"cvssScore":57,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":62},"CVE-2020-24556","A vulnerability in Trend Micro Apex One, OfficeScan XG SP1, Worry-Free Business Security 10 SP1 and Worry-Free Business Security Services on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.",0.00783,{"cveId":64,"description":65,"publishedDate":11,"cvssScore":66,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":67},"CVE-2025-53378","A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations.\r\n\r\nAlso note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.",7.6,0.0078,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":57,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":72},"CVE-2021-45231","A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.","2022-01-10",0.00643,{"cveId":74,"description":75,"publishedDate":56,"cvssScore":76,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":77},"CVE-2020-24558","A vulnerability in an Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services dll may allow an attacker to manipulate it to cause an out-of-bounds read that crashes multiple processes in the product. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",7.1,0.00633,[79],{"cveId":23,"description":24,"publishedDate":25,"cvssScore":26,"severity":28,"isKev":4,"epssScore":29,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":83},"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","2023-09-21","Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Worry-free Business Security Services by Trendmicro - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Worry-free Business Security Services by Trendmicro covering 1 version with 25 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Worry-free Business Security Services vulnerabilities, Worry-free Business Security Services security, Worry-free Business Security Services CVE, Trendmicro Worry-free Business Security Services, Worry-free Business Security Services threat intelligence, Trendmicro security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Worry-free Business Security Services KEV, Worry-free Business Security Services exploited vulnerabilities",{"@context":89,"@type":90,"name":91,"description":86,"url":92,"manufacturer":93,"applicationCategory":97,"softwareVersion":98,"mainEntity":99},"https:\u002F\u002Fschema.org","SoftwareApplication","Worry-free Business Security Services","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftrendmicro\u002Fworry-free_business_security_services",{"@type":94,"name":95,"url":96},"Organization","Trendmicro","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrendmicro","Security Software","1 versions tracked",{"@type":100,"name":101,"description":102,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Worry-free Business Security Services Security Vulnerabilities","Security vulnerabilities affecting Worry-free Business Security Services by Trendmicro",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":104,"apiVersion":105},"2026-10-18T00:58:35.237Z","3.0",[],{"rows":108,"total":9,"capped":17,"failed":16},[109],{"cveId":23,"name":80,"severity":28,"cvss":26,"added":81,"epss":29,"published":110,"ranges":111,"checked":4,"hits":112,"covers":17},"2023-09-19T14:15:21.343",[],[]]