← Back

Trendmicro

trendmicro

575 CVEs • 105 products

Products (105)

Click to collapse
Toggle
Apex One
apex_one
180 CVEs
Officescan
officescan
71 CVEs
Worry Free Business Security
worry-free_business_security
58 CVEs
Apex Central
apex_central
35 CVEs
Interscan Web Security Virtual Appliance
interscan_web_security_virtual_appliance
29 CVEs
Worry Free Business Security Services
worry-free_business_security_services
25 CVEs
Control Manager
control_manager
22 CVEs
Mobile Security
mobile_security
21 CVEs
Email Encryption Gateway
email_encryption_gateway
19 CVEs
Antivirus+
antivirus+
18 CVEs
Serverprotect
serverprotect
18 CVEs
Internet Security
internet_security
17 CVEs
Password Manager
password_manager
15 CVEs
Deep Security Agent
deep_security_agent
15 CVEs
Interscan Messaging Security Virtual Appliance
interscan_messaging_security_virtual_appliance
13 CVEs
Smart Protection Server
smart_protection_server
13 CVEs
Maximum Security
maximum_security
13 CVEs
Premium Security
premium_security
13 CVEs
Threat Discovery Appliance
threat_discovery_appliance
12 CVEs
Maximum Security 2020
maximum_security_2020
12 CVEs
Internet Security 2020
internet_security_2020
11 CVEs
Premium Security 2020
premium_security_2020
11 CVEs
Housecall
housecall
9 CVEs
Trend Micro Endpoint Encryption
trend_micro_endpoint_encryption
9 CVEs
Trend Micro Antivirus
trend_micro_antivirus
8 CVEs
Security
security
8 CVEs
Maximum Security 2019
maximum_security_2019
8 CVEs
Deep Security
deep_security
7 CVEs
Internet Security 2019
internet_security_2019
7 CVEs
Premium Security 2019
premium_security_2019
7 CVEs
Housecall For Home Networks
housecall_for_home_networks
7 CVEs
Maximum Security 2022
maximum_security_2022
7 CVEs
Deep Discovery Inspector
deep_discovery_inspector
6 CVEs
Scanmail
scanmail
6 CVEs
Antivirus + Security
antivirus_+_security
6 CVEs
Antivirus+ Security 2020
antivirus+_security_2020
6 CVEs
Antivirus For Mac 2017
antivirus_for_mac_2017
5 CVEs
Antivirus For Mac 2018
antivirus_for_mac_2018
5 CVEs
Antivirus For Mac 2019
antivirus_for_mac_2019
5 CVEs
Antivirus + Security 2019
antivirus_+_security_2019
5 CVEs
Vulnerability Protection
vulnerability_protection
5 CVEs
Maximum Security 2021
maximum_security_2021
5 CVEs
Home Network Security
home_network_security
5 CVEs
Trend Vision One
trend_vision_one
5 CVEs
Deep Security Manager
deep_security_manager
4 CVEs
Officescan Cloud
officescan_cloud
4 CVEs
Serverprotect For Storage
serverprotect_for_storage
4 CVEs
Interscan Messaging Security Suite
interscan_messaging_security_suite
3 CVEs
Endpoint Sensor
endpoint_sensor
3 CVEs
Deep Discovery Director
deep_discovery_director
3 CVEs
Antivirus+ 2020
antivirus+_2020
3 CVEs
Officescan Business Security
officescan_business_security
3 CVEs
Antivirus+ Security 2021
antivirus+_security_2021
3 CVEs
Internet Security 2021
internet_security_2021
3 CVEs
Premium Security 2021
premium_security_2021
3 CVEs
Serverprotect For Network Appliance Filer
serverprotect_for_network_appliance_filer
3 CVEs
Interscan Web Security Suite
interscan_web_security_suite
2 CVEs
Deep Discovery Email Inspector
deep_discovery_email_inspector
2 CVEs
Officescan Xg
officescan_xg
2 CVEs
Dr. Safety
dr._safety
2 CVEs
Anti Threat Toolkit
anti-threat_toolkit
2 CVEs
Antivirus + Security 2020
antivirus_+_security_2020
2 CVEs
Im Security
im_security
2 CVEs
Portable Security
portable_security
2 CVEs
Safe Lock
safe_lock
2 CVEs
Antivirus+ 2019
antivirus+_2019
2 CVEs
Cloud Edge
cloud_edge
2 CVEs
Maximum Security 2023
maximum_security_2023
2 CVEs
Antivirus One
antivirus_one
2 CVEs
Client Server Messaging Suite
client_server_messaging_suite
1 CVE
Trend Micro Internet Security
trend_micro_internet_security
1 CVE
Internet Security 2010
internet_security_2010
1 CVE
Tmeext.sys
tmeext.sys
1 CVE
Virtual Mobile Infrastructure
virtual_mobile_infrastructure
1 CVE
Encryption For Email
encryption_for_email
1 CVE
Endpoint Application Control
endpoint_application_control
1 CVE
Officescan Monthly
officescan_monthly
1 CVE
Apex One As A Service
apex_one_as_a_service
1 CVE
Business Security
business_security
1 CVE
Ransom Buster
ransom_buster
1 CVE
Deep Security As A Service
deep_security_as_a_service
1 CVE
Antivirus Toolkit
antivirus_toolkit
1 CVE
Officescan Business Security Service
officescan_business_security_service
1 CVE
Online Scan
online_scan
1 CVE
Rootkit Buster
rootkit_buster
1 CVE
Deep Discovery Analyzer
deep_discovery_analyzer
1 CVE
Portal Protect
portal_protect
1 CVE
Scanmail For Ibm Domino
scanmail_for_ibm_domino
1 CVE
Serverprotect For Network Appliance Filers
serverprotect_for_network_appliance_filers
1 CVE
Security For Best Buy
security_for_best_buy
1 CVE
Antivirus+ Security
antivirus+_security
1 CVE
Antivirus For Mac
antivirus_for_mac
1 CVE
Vpn Proxy One Pro
vpn_proxy_one_pro
1 CVE
Txone Stellarone
txone_stellarone
1 CVE
Antivirus+ Security 2022
antivirus+_security_2022
1 CVE
Internet Security 2022
internet_security_2022
1 CVE
Premium Security 2022
premium_security_2022
1 CVE
Antivirus+ Security 2023
antivirus+_security_2023
1 CVE
Internet Security 2023
internet_security_2023
1 CVE
Premium Security 2023
premium_security_2023
1 CVE

CVEs (575)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-14086
1Trendmicro
1Officescan
May 13, 2026
Oct 6, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potentia...Show more
Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.Show less
CVE-2017-14085
1Trendmicro
1Officescan
May 13, 2026
Oct 6, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.
CVE-2017-14084
1Trendmicro
1Officescan
May 13, 2026
Oct 6, 2017
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.
CVE-2017-14083
1Trendmicro
1Officescan
May 13, 2026
Oct 6, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.
CVE-2017-14081
1Trendmicro
1Mobile Security
May 13, 2026
Sep 22, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVE-2017-14080
1Trendmicro
1Mobile Security
May 13, 2026
Sep 22, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
CVE-2017-14079
1Trendmicro
1Mobile Security
May 13, 2026
Sep 22, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVE-2017-14078
1Trendmicro
1Mobile Security
May 13, 2026
Sep 22, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVE-2017-11396
1Trendmicro
1Interscan Web Security Virtual Appliance
May 13, 2026
Sep 22, 2017
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement...Show more
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.Show less
CVE-2017-11395
1Trendmicro
1Smart Protection Server
May 13, 2026
Sep 22, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations.
CVE-2016-6220
1Trendmicro
1Control Manager
May 13, 2026
Aug 7, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0.
CVE-2017-11394
1Trendmicro
1Officescan
May 13, 2026
Aug 3, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter...Show more
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.Show less
CVE-2017-11393
1Trendmicro
1Officescan
May 13, 2026
Aug 3, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter...Show more
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.Show less
CVE-2017-11392
1Trendmicro
1Interscan Messaging Security Virtual Appliance
May 13, 2026
Aug 3, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by...Show more
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "T" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745.Show less
CVE-2017-11391
1Trendmicro
1Interscan Messaging Security Virtual Appliance
May 13, 2026
Aug 3, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by...Show more
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744.Show less
CVE-2017-11382
1Trendmicro
1Deep Discovery Email Inspector
May 13, 2026
Aug 3, 2017
N/A· v4
7.5 HIGH· v3
6.4 MEDIUM· v2
Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350.
CVE-2017-11390
1Trendmicro
1Control Manager
May 13, 2026
Aug 2, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to information disclosure. Formerly ZDI-CAN-4706.
CVE-2017-11389
1Trendmicro
1Control Manager
May 13, 2026
Aug 2, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory. Formerly ZDI-CAN-4684.
CVE-2017-11388
1Trendmicro
1Control Manager
May 13, 2026
Aug 2, 2017
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and...Show more
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638.Show less
CVE-2017-11387
1Trendmicro
1Control Manager
May 13, 2026
Aug 2, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functionality that can change debug logging level. Formerly ZDI-CAN-4512.