# Trend Micro OfficeScan.

Every CVE that names Trend Micro OfficeScan among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Trend Micro Apex One: An incorrect permission preservation vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-32465.md)
  `CVE-2021-32465` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 4 Aug 2021
- [Improper input validation in Trend Micro Apex One and others](https://agentprime.io/advisories/CVE-2021-36742.md)
  `CVE-2021-36742` · CVE record: Trend Micro Trend Micro Apex One and 2 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 29 Jul 2021 · Tags: CWE-20
- [Unrestricted file upload in Trend Micro Apex One and others](https://agentprime.io/advisories/CVE-2021-36741.md)
  `CVE-2021-36741` · CVE record: Trend Micro Trend Micro Apex One and 2 more · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 29 Jul 2021 · Tags: Unrestricted file upload
- [Trend Micro Apex One: An insecure file permissions vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-28646.md)
  `CVE-2021-28646` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 13 Apr 2021
- [Trend Micro Apex One: An incorrect permission assignment vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-28645.md)
  `CVE-2021-28645` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 13 Apr 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-25253.md)
  `CVE-2021-25253` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 13 Apr 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-25250.md)
  `CVE-2021-25250` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 13 Apr 2021
- [Trend Micro Apex One: An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-25249.md)
  `CVE-2021-25249` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-25248.md)
  `CVE-2021-25248` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2021-25246.md)
  `CVE-2021-25246` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS)…](https://agentprime.io/advisories/CVE-2021-25243.md)
  `CVE-2021-25243` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS)…](https://agentprime.io/advisories/CVE-2021-25242.md)
  `CVE-2021-25242` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS)…](https://agentprime.io/advisories/CVE-2021-25240.md)
  `CVE-2021-25240` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem)…](https://agentprime.io/advisories/CVE-2021-25239.md)
  `CVE-2021-25239` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro OfficeScan: An improper access control information disclosure vulnerability in Trend Micro OfficeScan…](https://agentprime.io/advisories/CVE-2021-25238.md)
  `CVE-2021-25238` · CVE record: Trend Micro Trend Micro OfficeScan and 1 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro OfficeScan: A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro…](https://agentprime.io/advisories/CVE-2021-25236.md)
  `CVE-2021-25236` · CVE record: Trend Micro Trend Micro OfficeScan and 1 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and…](https://agentprime.io/advisories/CVE-2021-25235.md)
  `CVE-2021-25235` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS)…](https://agentprime.io/advisories/CVE-2021-25234.md)
  `CVE-2021-25234` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS)…](https://agentprime.io/advisories/CVE-2021-25233.md)
  `CVE-2021-25233` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and…](https://agentprime.io/advisories/CVE-2021-25232.md)
  `CVE-2021-25232` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS)…](https://agentprime.io/advisories/CVE-2021-25231.md)
  `CVE-2021-25231` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and…](https://agentprime.io/advisories/CVE-2021-25230.md)
  `CVE-2021-25230` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and…](https://agentprime.io/advisories/CVE-2021-25229.md)
  `CVE-2021-25229` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS)…](https://agentprime.io/advisories/CVE-2021-25228.md)
  `CVE-2021-25228` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 4 Feb 2021
- [Trend Micro Apex One: An improper access control information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2020-28583.md)
  `CVE-2020-28583` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 1 Dec 2020
- [Trend Micro Apex One: An improper access control information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2020-28582.md)
  `CVE-2020-28582` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 1 Dec 2020
- [Trend Micro Apex One: An improper access control information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2020-28577.md)
  `CVE-2020-28577` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 1 Dec 2020
- [Trend Micro Apex One: An improper access control information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2020-28576.md)
  `CVE-2020-28576` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 1 Dec 2020
- [Trend Micro Apex One: An improper access control information disclosure vulnerability in Trend Micro Apex One…](https://agentprime.io/advisories/CVE-2020-28573.md)
  `CVE-2020-28573` · CVE record: Trend Micro Trend Micro Apex One and 1 more · No CVSS score · Not analysed yet · Published 1 Dec 2020
- [Trend Micro OfficeScan: A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an…](https://agentprime.io/advisories/CVE-2020-24562.md)
  `CVE-2020-24562` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 28 Sept 2020
- [Trend Micro Apex One: A vulnerability in Trend Micro Apex One, OfficeScan XG SP1…](https://agentprime.io/advisories/CVE-2020-24556.md)
  `CVE-2020-24556` · CVE record: Trend Micro Trend Micro Apex One and 2 more · No CVSS score · Not analysed yet · Published 1 Sept 2020
- [An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator…](https://agentprime.io/advisories/CVE-2020-8607.md)
  `CVE-2020-8607` · CVE record: Trend Micro Trend Micro Apex One and 4 more · No CVSS score · Not analysed yet · Published 5 Aug 2020
- [Path traversal in Trend Micro OfficeScan](https://agentprime.io/advisories/CVE-2019-18187.md)
  `CVE-2019-18187` · CVE record: Trend Micro Trend Micro OfficeScan · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.25 · Not analysed yet · Published 28 Oct 2019 · Tags: Path traversal
- [Trend Micro OfficeScan: A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an…](https://agentprime.io/advisories/CVE-2019-9492.md)
  `CVE-2019-9492` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 26 Jul 2019
- [Trend Micro OfficeScan: A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to…](https://agentprime.io/advisories/CVE-2018-18332.md)
  `CVE-2018-18332` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 21 Dec 2018
- [Trend Micro OfficeScan: A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder…](https://agentprime.io/advisories/CVE-2018-18331.md)
  `CVE-2018-18331` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 21 Dec 2018
- [Trend Micro OfficeScan: A Named Pipe Request Processing Out-of-Bounds Read Information Disclosure vulnerability…](https://agentprime.io/advisories/CVE-2018-15364.md)
  `CVE-2018-15364` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 30 Aug 2018
- [Trend Micro OfficeScan: A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to…](https://agentprime.io/advisories/CVE-2018-10509.md)
  `CVE-2018-10509` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 12 Jun 2018
- [Trend Micro OfficeScan: A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a…](https://agentprime.io/advisories/CVE-2018-10508.md)
  `CVE-2018-10508` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 12 Jun 2018
- [Trend Micro OfficeScan: A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take…](https://agentprime.io/advisories/CVE-2018-10507.md)
  `CVE-2018-10507` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 12 Jun 2018
- [Trend Micro OfficeScan: A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0…](https://agentprime.io/advisories/CVE-2018-10506.md)
  `CVE-2018-10506` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 8 Jun 2018
- [Trend Micro OfficeScan: A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1…](https://agentprime.io/advisories/CVE-2018-10505.md)
  `CVE-2018-10505` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 8 Jun 2018
- [Trend Micro OfficeScan: A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1…](https://agentprime.io/advisories/CVE-2018-10359.md)
  `CVE-2018-10359` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 8 Jun 2018
- [Trend Micro OfficeScan: A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1…](https://agentprime.io/advisories/CVE-2018-10358.md)
  `CVE-2018-10358` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 8 Jun 2018
- [Trend Micro OfficeScan: An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may…](https://agentprime.io/advisories/CVE-2017-14089.md)
  `CVE-2017-14089` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 5 Oct 2017
- [Trend Micro OfficeScan: Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and…](https://agentprime.io/advisories/CVE-2017-14088.md)
  `CVE-2017-14088` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 5 Oct 2017
- [Trend Micro OfficeScan: A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an…](https://agentprime.io/advisories/CVE-2017-14087.md)
  `CVE-2017-14087` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 5 Oct 2017
- [Trend Micro OfficeScan: Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and…](https://agentprime.io/advisories/CVE-2017-14086.md)
  `CVE-2017-14086` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 5 Oct 2017
- [Trend Micro OfficeScan: Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow…](https://agentprime.io/advisories/CVE-2017-14085.md)
  `CVE-2017-14085` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 5 Oct 2017
- [Trend Micro OfficeScan: A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0…](https://agentprime.io/advisories/CVE-2017-14084.md)
  `CVE-2017-14084` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · EPSS 0.10 · Not analysed yet · Published 5 Oct 2017
- [Trend Micro OfficeScan: A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users…](https://agentprime.io/advisories/CVE-2017-14083.md)
  `CVE-2017-14083` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · Not analysed yet · Published 5 Oct 2017
- [Trend Micro OfficeScan: Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows…](https://agentprime.io/advisories/CVE-2017-11394.md)
  `CVE-2017-11394` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · EPSS 0.67 · Not analysed yet · Published 3 Aug 2017
- [Trend Micro OfficeScan: Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows…](https://agentprime.io/advisories/CVE-2017-11393.md)
  `CVE-2017-11393` · CVE record: Trend Micro Trend Micro OfficeScan · No CVSS score · EPSS 0.16 · Not analysed yet · Published 3 Aug 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=trend-micro-officescan>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/trend-micro-officescan/>. Everything for agents: <https://agentprime.io/llms.txt>.