Trend Micro OfficeScan, Trend Micro Apex One vulnerabilities

2 known vulnerabilities in Trend Micro OfficeScan, Trend Micro Apex One from Trend Micro. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Trend Micro Apex One and OfficeScan Authentication Bypass Exploited

  CVE-2020-8599Mar 18, 2020Trend MicroEPSS 11.9%

  Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this v

• 8.8 High severity

  Trend Micro Apex One and OfficeScan Remote Code Execution Exploited

  CVE-2020-8467Mar 18, 2020Trend MicroEPSS 10.9%

  A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.