{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Trend Micro vulnerabilities","home_page_url":"https://patchfirst.co/vendor/trend-micro/","feed_url":"https://patchfirst.co/feed/vendor/trend-micro.json","description":"New and newly exploited Trend Micro CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-34926#kev","url":"https://patchfirst.co/cve/CVE-2026-34926/","title":"[KEV] CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","content_text":"Trend Micro · Apex One. In CISA KEV since 2026-05-21. ENISA EUVD lists it as exploited. EPSS 13.4% (higher than 96.4% of CVEs). CVSS 6.7 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 72.0 of 100.","summary":"Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","date_published":"2026-05-21T00:00:00.000Z","date_modified":"2026-07-23T16:10:00.000Z","tags":["kev","public-exploit","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":72,"kev":{"dateAdded":"2026-05-21","ransomware":false},"epss":{"score":0.1342,"percentile":0.9642},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Trend Micro","product":"Apex One","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-54948#kev","url":"https://patchfirst.co/cve/CVE-2025-54948/","title":"[KEV] CVE-2025-54948: Trend Micro Apex One OS Command Injection Vulnerability","content_text":"Trend Micro · Apex One. In CISA KEV since 2025-08-18. ENISA EUVD lists it as exploited. EPSS 25.4% (higher than 97.9% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 64.4 of 100.","summary":"Trend Micro Apex One OS Command Injection Vulnerability","date_published":"2025-08-18T00:00:00.000Z","date_modified":"2026-06-17T09:40:58.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":64.4,"kev":{"dateAdded":"2025-08-18","ransomware":false},"epss":{"score":0.25402,"percentile":0.97945},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Trend Micro","product":"Apex One","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-54987","url":"https://patchfirst.co/cve/CVE-2025-54987/","title":"CVE-2025-54987: A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote…","content_text":"Trend Micro, Inc. · Trend Micro Apex One. Not in CISA KEV. EPSS 21.5% (higher than 97.6% of CVEs). CVSS 9.4 CRITICAL. Priority 61.8 of 100.","summary":"A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote…","date_published":"2025-08-05T00:00:00.000Z","date_modified":"2026-02-26T17:49:58.000Z","tags":[],"_patchfirst":{"reason":"published","priority":61.8,"kev":null,"epss":{"score":0.21503,"percentile":0.97614},"cvss":{"score":9.4,"severity":"CRITICAL","version":"3.1"},"vendor":"Trend Micro, Inc.","product":"Trend Micro Apex One","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-41179#kev","url":"https://patchfirst.co/cve/CVE-2023-41179/","title":"[KEV] CVE-2023-41179: Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","content_text":"Trend Micro · Apex One and Worry-Free Business Security. In CISA KEV since 2023-09-21. ENISA EUVD lists it as exploited. EPSS 4.2% (higher than 91% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 61.2 of 100.","summary":"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","date_published":"2023-09-21T00:00:00.000Z","date_modified":"2026-06-17T06:20:55.000Z","tags":["kev","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":61.2,"kev":{"dateAdded":"2023-09-21","ransomware":false},"epss":{"score":0.04216,"percentile":0.90979},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"Apex One and Worry-Free Business Security","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-32521","url":"https://patchfirst.co/cve/CVE-2023-32521/","title":"CVE-2023-32521: A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could…","content_text":"Trend Micro, Inc. · Trend Micro Moibile Security for Enterprise. Not in CISA KEV. EPSS 66.8% (higher than 99.29% of CVEs). Priority 19.9 of 100.","summary":"A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could…","date_published":"2023-06-26T00:00:00.000Z","date_modified":"2024-12-05T14:45:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.66809,"percentile":0.9929},"cvss":null,"vendor":"Trend Micro, Inc.","product":"Trend Micro Moibile Security for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-40139","url":"https://patchfirst.co/cve/CVE-2022-40139/","title":"CVE-2022-40139: Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","content_text":"Trend Micro · Apex One and Apex One as a Service. In CISA KEV since 2022-09-15. ENISA EUVD lists it as exploited. EPSS 3.4% (higher than 89% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1072 Software Deployment Tools. Priority 60.8 of 100.","summary":"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","date_published":"2022-09-19T00:00:00.000Z","date_modified":"2026-06-17T05:01:01.000Z","tags":["kev","T1078","T1059","T1072"],"_patchfirst":{"reason":"published","priority":60.8,"kev":{"dateAdded":"2022-09-15","ransomware":false},"epss":{"score":0.03439,"percentile":0.88957},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"Apex One and Apex One as a Service","techniqueIds":["T1078","T1059","T1072"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-26871#kev","url":"https://patchfirst.co/cve/CVE-2022-26871/","title":"[KEV] CVE-2022-26871: Trend Micro Apex Central Arbitrary File Upload Vulnerability","content_text":"Trend Micro · Apex Central. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 19.5% (higher than 97.4% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 64.3 of 100.","summary":"Trend Micro Apex Central Arbitrary File Upload Vulnerability","date_published":"2022-03-31T00:00:00.000Z","date_modified":"2026-06-17T04:36:02.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":64.3,"kev":{"dateAdded":"2022-03-31","ransomware":false},"epss":{"score":0.19481,"percentile":0.97369},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Trend Micro","product":"Apex Central","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-8468#kev","url":"https://patchfirst.co/cve/CVE-2020-8468/","title":"[KEV] CVE-2020-8468: Trend Micro Multiple Products Content Validation Escape Vulnerability","content_text":"Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 6.2% (higher than 93.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Named in 1 threat report. Priority 66.7 of 100.","summary":"Trend Micro Multiple Products Content Validation Escape Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:26:25.000Z","tags":["kev","T1190","T1068"],"_patchfirst":{"reason":"kev","priority":66.7,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.06165,"percentile":0.93472},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"Apex One, OfficeScan and Worry-Free Business Security Agents","techniqueIds":["T1190","T1068"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-8599#kev","url":"https://patchfirst.co/cve/CVE-2020-8599/","title":"[KEV] CVE-2020-8599: Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","content_text":"Trend Micro · Apex One and OfficeScan. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 11.9% (higher than 96.1% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 64.1 of 100.","summary":"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:26:37.000Z","tags":["kev","T1190","T1565"],"_patchfirst":{"reason":"kev","priority":64.1,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.11858,"percentile":0.9609},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Trend Micro","product":"Apex One and OfficeScan","techniqueIds":["T1190","T1565"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-8467#kev","url":"https://patchfirst.co/cve/CVE-2020-8467/","title":"[KEV] CVE-2020-8467: Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","content_text":"Trend Micro · Apex One and OfficeScan. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 63.3 of 100.","summary":"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:26:25.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":63.3,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.109,"percentile":0.95866},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"Apex One and OfficeScan","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-18187#kev","url":"https://patchfirst.co/cve/CVE-2019-18187/","title":"[KEV] CVE-2019-18187: Trend Micro OfficeScan Directory Traversal Vulnerability","content_text":"Trend Micro · OfficeScan. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 25.1% (higher than 97.9% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 62.8 of 100.","summary":"Trend Micro OfficeScan Directory Traversal Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:24:26.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":62.8,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.25125,"percentile":0.97928},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"OfficeScan","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-36741#kev","url":"https://patchfirst.co/cve/CVE-2021-36741/","title":"[KEV] CVE-2021-36741: Trend Micro Multiple Products Improper Input Validation Vulnerability","content_text":"Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 5.0% (higher than 92.2% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1505.003 Web Shell. Priority 62.6 of 100.","summary":"Trend Micro Multiple Products Improper Input Validation Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:59:05.000Z","tags":["kev","T1190","T1505.003"],"_patchfirst":{"reason":"kev","priority":62.6,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.04951,"percentile":0.92159},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","techniqueIds":["T1190","T1505.003"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-24557#kev","url":"https://patchfirst.co/cve/CVE-2020-24557/","title":"[KEV] CVE-2020-24557: Trend Micro Multiple Products Improper Access Control Vulnerability","content_text":"Trend Micro · Apex One, OfficeScan, and Worry-Free Business Security. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 2.7% (higher than 85.7% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 60.6 of 100.","summary":"Trend Micro Multiple Products Improper Access Control Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:05:45.000Z","tags":["kev","T1068"],"_patchfirst":{"reason":"kev","priority":60.6,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.02666,"percentile":0.85711},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"Apex One, OfficeScan, and Worry-Free Business Security","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-36742#kev","url":"https://patchfirst.co/cve/CVE-2021-36742/","title":"[KEV] CVE-2021-36742: Trend Micro Multiple Products Improper Input Validation Vulnerability","content_text":"Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 58.2 of 100.","summary":"Trend Micro Multiple Products Improper Input Validation Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:59:05.000Z","tags":["kev","T1068"],"_patchfirst":{"reason":"kev","priority":58.2,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.01482,"percentile":0.73931},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Trend Micro","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-8466","url":"https://patchfirst.co/cve/CVE-2020-8466/","title":"CVE-2020-8466: A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved…","content_text":"Trend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 64.1% (higher than 99.22% of CVEs). Priority 20.5 of 100.","summary":"A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved…","date_published":"2020-12-17T00:00:00.000Z","date_modified":"2024-08-04T10:03:44.000Z","tags":[],"_patchfirst":{"reason":"published","priority":20.5,"kev":null,"epss":{"score":0.64075,"percentile":0.99225},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro InterScan Web Security Virtual Appliance","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-28578","url":"https://patchfirst.co/cve/CVE-2020-28578/","title":"CVE-2020-28578: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote…","content_text":"Trend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 73.0% (higher than 99.45% of CVEs). Priority 19.9 of 100.","summary":"A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote…","date_published":"2020-11-18T00:00:00.000Z","date_modified":"2024-08-04T16:40:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.73048,"percentile":0.99454},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro InterScan Web Security Virtual Appliance","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-8605","url":"https://patchfirst.co/cve/CVE-2020-8605/","title":"CVE-2020-8605: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute…","content_text":"Trend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 87.8% (higher than 99.76% of CVEs). Public exploit code exists. Priority 25.0 of 100.","summary":"A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute…","date_published":"2020-05-27T00:00:00.000Z","date_modified":"2024-08-04T10:03:46.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":25,"kev":null,"epss":{"score":0.8776,"percentile":0.9976},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro InterScan Web Security Virtual Appliance","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-8604","url":"https://patchfirst.co/cve/CVE-2020-8604/","title":"CVE-2020-8604: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose…","content_text":"Trend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 89.8% (higher than 99.79% of CVEs). Public exploit code exists. Priority 25.0 of 100.","summary":"A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose…","date_published":"2020-05-27T00:00:00.000Z","date_modified":"2024-08-04T10:03:46.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":25,"kev":null,"epss":{"score":0.89772,"percentile":0.99789},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro InterScan Web Security Virtual Appliance","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2020-8606","url":"https://patchfirst.co/cve/CVE-2020-8606/","title":"CVE-2020-8606: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass…","content_text":"Trend Micro · Trend Micro InterScan Web Security Virtual Appliance. Not in CISA KEV. EPSS 73.3% (higher than 99.46% of CVEs). Public exploit code exists. Priority 24.9 of 100.","summary":"A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass…","date_published":"2020-05-27T00:00:00.000Z","date_modified":"2024-08-04T10:03:46.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.9,"kev":null,"epss":{"score":0.73295,"percentile":0.99459},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro InterScan Web Security Virtual Appliance","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2019-9489","url":"https://patchfirst.co/cve/CVE-2019-9489/","title":"CVE-2019-9489: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free…","content_text":"Trend Micro · Apex One, OfficeScan, Worry-Free Business Security. Not in CISA KEV. EPSS 2.3% (higher than 82.9% of CVEs). Named in 1 threat report. Priority 56.1 of 100.","summary":"A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free…","date_published":"2019-04-05T00:00:00.000Z","date_modified":"2024-08-04T21:54:44.000Z","tags":[],"_patchfirst":{"reason":"published","priority":56.1,"kev":null,"epss":{"score":0.02257,"percentile":0.82933},"cvss":null,"vendor":"Trend Micro","product":"Apex One, OfficeScan, Worry-Free Business Security","techniqueIds":[],"reportCount":1,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-10357","url":"https://patchfirst.co/cve/CVE-2018-10357/","title":"CVE-2018-10357: A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to…","content_text":"Trend Micro · Trend Micro Endpoint Application Control. Not in CISA KEV. EPSS 64.7% (higher than 99.24% of CVEs). Priority 19.8 of 100.","summary":"A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to…","date_published":"2018-05-23T00:00:00.000Z","date_modified":"2024-08-05T07:39:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.6466,"percentile":0.9924},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro Endpoint Application Control","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-3604","url":"https://patchfirst.co/cve/CVE-2018-3604/","title":"CVE-2018-3604: GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow…","content_text":"Trend Micro · Trend Micro Control Manager. Not in CISA KEV. EPSS 67.8% (higher than 99.32% of CVEs). Priority 19.9 of 100.","summary":"GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow…","date_published":"2018-02-09T00:00:00.000Z","date_modified":"2024-08-05T04:50:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.67848,"percentile":0.99318},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro Control Manager","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2017-11394","url":"https://patchfirst.co/cve/CVE-2017-11394/","title":"CVE-2017-11394: Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute…","content_text":"Trend Micro · Trend Micro OfficeScan. Not in CISA KEV. EPSS 66.8% (higher than 99.29% of CVEs). Public exploit code exists. Priority 24.9 of 100.","summary":"Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute…","date_published":"2017-08-03T00:00:00.000Z","date_modified":"2024-09-16T16:53:36.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.9,"kev":null,"epss":{"score":0.66774,"percentile":0.99289},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro OfficeScan","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2017-11391","url":"https://patchfirst.co/cve/CVE-2017-11391/","title":"CVE-2017-11391: Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote…","content_text":"Trend Micro · Trend Micro InterScan Messaging Security Virtual Appliance. Not in CISA KEV. EPSS 62.1% (higher than 99.18% of CVEs). Public exploit code exists. Priority 24.8 of 100.","summary":"Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote…","date_published":"2017-08-03T00:00:00.000Z","date_modified":"2024-09-17T03:33:52.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.8,"kev":null,"epss":{"score":0.62132,"percentile":0.99177},"cvss":null,"vendor":"Trend Micro","product":"Trend Micro InterScan Messaging Security Virtual Appliance","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}