Trend Micro vulnerabilities, page 5

419 vulnerabilities

Known vulnerabilities in Trend Micro products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 128 products.

5.4MediumCVE-2021-31521trend micro · trend micro interscan web security virtual appliance +1 moretrend micro trend micro interscan web security virtual applianceTrend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XSS) vulnerability in the product's Captive Portal.EPSS1.40%7.8HighCVE-2021-31517trend micro · trend micro home network security +1 moretrend micro trend micro home network securityTrend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31518.EPSS1.10%7.8HighCVE-2021-36742trend micro · trend micro apex one +6 moretrend micro trend micro apex oneA improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.KEVEPSS1.48%10CriticalCVE-2021-36745trend micro · trend micro serverprotect for emc celerra +4 moretrend micro trend micro serverprotect for emc celerraA vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.EPSS9.38%8.8HighCVE-2021-36741trend micro · trend micro apex one +6 moretrend micro trend micro apex oneAn improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.KEVEPSS4.95%7.8HighCVE-2021-36744trend micro · trend micro security (consumer) +4 moretrend micro trend micro security (consumer)Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service.EPSS0.47%5.3MediumCVE-2021-25244trend micro · trend micro worry-free business security +1 moretrend micro trend micro worry-free business securityAn improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of configuration informaiton.EPSS1.53%5.5MediumCVE-2021-25226trend micro · trend micro serverprotect for linux +1 moretrend micro trend micro serverprotect for linuxA memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.41%7.2HighCVE-2021-25251trend micro · trend micro security (consumer) +8 moretrend micro trend micro security (consumer)The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.EPSS2.58%5.3MediumCVE-2021-25240trend micro · trend micro apex one +5 moretrend micro trend micro apex oneAn improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain x64 agent hofitx information.EPSS2.09%3.3LowCVE-2021-25227trend micro · trend micro antivirus for mac +1 moretrend micro trend micro antivirus for macTrend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability - i.e. the attacker must already have access to the target system (either legitimately or via another exploit).EPSS0.48%5.3MediumCVE-2021-25228trend micro · trend micro apex one +5 moretrend micro trend micro apex oneAn improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history.EPSS2.12%5.5MediumCVE-2021-25252trend micro · trend micro virus scan api (vsapi) engine +19 moretrend micro trend micro virus scan api (vsapi) engineTrend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.EPSS0.62%5.5MediumCVE-2021-25225trend micro · trend micro serverprotect for linux +1 moretrend micro trend micro serverprotect for linuxA memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.41%5.5MediumCVE-2021-25224trend micro · trend micro serverprotect for linux +1 moretrend micro trend micro serverprotect for linuxA memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.41%5.3MediumCVE-2021-25231trend micro · trend micro apex one +5 moretrend micro trend micro apex oneAn improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific hotfix history file.EPSS2.15%5.3MediumCVE-2021-25234trend micro · trend micro apex one +5 moretrend micro trend micro apex oneAn improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific notification configuration file.EPSS2.07%6.5MediumCVE-2021-25246trend micro · trend micro apex one +5 moretrend micro trend micro apex oneAn improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.EPSS1.74%7.8HighCVE-2021-25250trend micro · trend micro apex one +3 moretrend micro trend micro apex oneAn improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.EPSS0.51%5.3MediumCVE-2021-25232trend micro · trend micro apex one +3 moretrend micro trend micro apex oneAn improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database.EPSS2.03%