İçeriğe atla
Noroxi

trendmicro kayıtları

trendmicro üreticisine ait 575 yayımlanmış kayıt. Bunların 12 tanesi sahada sömürüldü (CISA KEV listesinde), 24 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
12 · %2,1
Silahlaştırılmış
24 · %4,2
Pre-auth RCE
52
Düzeltme kaydı olan
%31,3
Yayından KEV’e ortanca
97 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

575 kayıt
  • CVE-2025-54948
    79Bu hafta

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %32

    trendmicro · apex one5 Ağu 2025

  • CVE-2022-26871
    75Bu hafta

    An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary fil

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %19

    trendmicro · apex central29 Mar 2022

  • CVE-2020-8599
    73Bu hafta

    Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary dat

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %11

    trendmicro · apex one17 Mar 2020

  • CVE-2019-18187
    68Bu hafta

    Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extrac

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %25

    trendmicro · officescan28 Eki 2019

  • CVE-2020-8467
    68Bu hafta

    A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to e

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    trendmicro · apex one17 Mar 2020

  • CVE-2016-7552
    67Bu hafta

    On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthent

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    trendmicro · threat discovery appliance12 Nis 2017

  • CVE-2016-7547
    67Bu hafta

    A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.c

    KritikCVSS 9,8SilahlaştırılmışEPSS %92

    trendmicro · threat discovery appliance12 Nis 2017

  • CVE-2020-8468
    67Bu hafta

    Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation esc

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %6

    trendmicro · apex one17 Mar 2020

  • CVE-2021-36741
    66Bu hafta

    An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 1

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %4

    trendmicro · officescan29 Tem 2021

  • CVE-2020-24557
    62Bu hafta

    A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    microsoft · windows1 Eyl 2020

  • CVE-2020-8605
    61Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected

    YüksekCVSS 8,8SilahlaştırılmışEPSS %87

    trendmicro · interscan web security virtual appliance27 May 2020

  • CVE-2020-8606
    61Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected

    KritikCVSS 9,8SilahlaştırılmışEPSS %73

    trendmicro · interscan web security virtual appliance27 May 2020

  • CVE-2020-28578
    61Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a sp

    KritikCVSS 9,8İstismar yokEPSS %73

    trendmicro · interscan web security virtual appliance18 Kas 2020

  • CVE-2021-36742
    61Bu hafta

    A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    trendmicro · officescan29 Tem 2021

  • CVE-2020-8604
    60Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on

    YüksekCVSS 7,5SilahlaştırılmışEPSS %89

    trendmicro · interscan web security virtual appliance27 May 2020

  • CVE-2017-11394
    60Bu hafta

    Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerab

    KritikCVSS 9,8SilahlaştırılmışEPSS %66

    trendmicro · officescan3 Ağu 2017

  • CVE-2026-34926
    60Bu hafta

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table

    OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %13

    trendmicro · apex one21 May 2026

  • CVE-2017-7896
    60Bu hafta

    Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

    OrtaCVSS 6,1SilahlaştırılmışEPSS %4

    trendmicro · interscan messaging security virtual appliance18 Nis 2017

  • CVE-2023-41179
    59Planlayın

    A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security an

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %4

    trendmicro · apex one19 Eyl 2023

  • CVE-2022-40139
    59Planlayın

    Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %3

    trendmicro · apex one19 Eyl 2022

  • CVE-2020-8466
    58Planlayın

    A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method

    KritikCVSS 9,8İstismar yokEPSS %64

    trendmicro · interscan web security virtual appliance17 Ara 2020

  • CVE-2023-32521
    56Planlayın

    A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated r

    KritikCVSS 9,1İstismar yokEPSS %66

    trendmicro · mobile security26 Haz 2023

  • CVE-2018-3604
    55Planlayın

    GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to

    YüksekCVSS 8,8İstismar yokEPSS %67

    trendmicro · control manager9 Şub 2018

  • CVE-2018-10357
    54Planlayın

    A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code

    YüksekCVSS 8,8İstismar yokEPSS %64

    trendmicro · endpoint application control23 May 2018

  • CVE-2017-11391
    54Planlayın

    Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute ar

    YüksekCVSS 8,8SilahlaştırılmışEPSS %62

    trendmicro · interscan messaging security virtual appliance3 Ağu 2017