İçeriğe atla
Noroxi

trendmicro kayıtları

trendmicro üreticisine ait 575 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
12 · %2,1
Silahlaştırılmış
24 · %4,2
Pre-auth RCE
52
Düzeltme kaydı olan
%31,3
Yayından KEV’e ortanca
97 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

575 kayıt
  • CVE-2025-54948
    76Bu hafta

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %22

    trendmicro · apex one5 Ağu 2025

  • CVE-2022-26871
    75Bu hafta

    An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary fil

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %19

    trendmicro · apex central29 Mar 2022

  • CVE-2020-8599
    73Bu hafta

    Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary dat

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %12

    trendmicro · apex one17 Mar 2020

  • CVE-2019-18187
    68Bu hafta

    Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extrac

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %25

    trendmicro · officescan28 Eki 2019

  • CVE-2020-8467
    68Bu hafta

    A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to e

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %11

    trendmicro · apex one17 Mar 2020

  • CVE-2016-7552
    67Bu hafta

    On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthent

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    trendmicro · threat discovery appliance12 Nis 2017

  • CVE-2016-7547
    67Bu hafta

    A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.c

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    trendmicro · threat discovery appliance12 Nis 2017

  • CVE-2020-8468
    67Bu hafta

    Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation esc

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %6

    trendmicro · apex one17 Mar 2020

  • CVE-2021-36741
    66Bu hafta

    An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 1

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %5

    trendmicro · officescan29 Tem 2021

  • CVE-2020-24557
    62Bu hafta

    A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3

    microsoft · windows1 Eyl 2020

  • CVE-2020-8605
    61Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected

    YüksekCVSS 8,8SilahlaştırılmışEPSS %88

    trendmicro · interscan web security virtual appliance27 May 2020

  • CVE-2020-28578
    61Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a sp

    KritikCVSS 9,8İstismar yokEPSS %73

    trendmicro · interscan web security virtual appliance18 Kas 2020

  • CVE-2020-8606
    61Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected

    KritikCVSS 9,8SilahlaştırılmışEPSS %73

    trendmicro · interscan web security virtual appliance27 May 2020

  • CVE-2021-36742
    61Bu hafta

    A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    trendmicro · officescan29 Tem 2021

  • CVE-2017-11394
    59Planlayın

    Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerab

    KritikCVSS 9,8SilahlaştırılmışEPSS %67

    trendmicro · officescan3 Ağu 2017

  • CVE-2023-41179
    59Planlayın

    A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security an

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %4

    trendmicro · apex one19 Eyl 2023

  • CVE-2022-40139
    59Planlayın

    Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %3

    trendmicro · apex one19 Eyl 2022

  • CVE-2020-8466
    58Planlayın

    A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method

    KritikCVSS 9,8İstismar yokEPSS %64

    trendmicro · interscan web security virtual appliance17 Ara 2020

  • CVE-2020-8604
    57Planlayın

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on

    YüksekCVSS 7,5SilahlaştırılmışEPSS %90

    trendmicro · interscan web security virtual appliance27 May 2020

  • CVE-2023-32521
    56Planlayın

    A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated r

    KritikCVSS 9,1İstismar yokEPSS %67

    trendmicro · mobile security26 Haz 2023

  • CVE-2026-34926
    56Planlayın

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table

    OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %1

    trendmicro · apex one21 May 2026

  • CVE-2018-3604
    55Planlayın

    GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to

    YüksekCVSS 8,8İstismar yokEPSS %68

    trendmicro · control manager9 Şub 2018

  • CVE-2018-10357
    54Planlayın

    A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code

    YüksekCVSS 8,8İstismar yokEPSS %65

    trendmicro · endpoint application control23 May 2018

  • CVE-2017-11391
    54Planlayın

    Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute ar

    YüksekCVSS 8,8SilahlaştırılmışEPSS %62

    trendmicro · interscan messaging security virtual appliance3 Ağu 2017

  • CVE-2023-0587
    54Planlayın

    A file upload vulnerability in exists in Trend Micro Apex One server build 11110.

    KritikCVSS 9,1İstismar yokEPSS %60

    trendmicro · apex one31 Oca 2023