Trendmicro Officescan Business Security vulnerabilities
3 vulnerabilities
Known vulnerabilities in Trendmicro Officescan Business Security, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-36742trend microtrend micro apex one+6KEV
EPSS score1.48%
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.CVE-2021-36741trend microtrend micro apex one+6KEVEPSS score4.95%
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.CVE-2020-8607trend microtrend micro anti-threat toolkit (attk)+22EPSS score0.55%
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.