Known vulnerabilities in OfficeScan

Software: OfficeScan
Software CPE: cpe:2.3:a:trend_micro:officescan:*:*:*:*:*:*:*:*
Total vulnerabilities: 49
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OfficeScan OfficeScan is affected by 49 known vulnerabilities: 2 critical, 12 high, 19 medium, 16 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51833 - Incorrect Default Permissions
CVE-2021-28646
CWE-276 Low
No
No
XG SP1 CP 6046 31.03.2021 SB2021033121
#VU51832 - Insecure inherited permissions
CVE-2021-28645
CWE-277 Low
No
No
XG SP1 CP 6046 31.03.2021 SB2021033121
#VU51831 - Improper Access Control
CVE-2021-25253
CWE-284 Low
No
No
XG SP1 CP 6046 31.03.2021 SB2021033121
#VU51830 - Improper Access Control
CVE-2021-25250
CWE-284 Low
No
No
XG SP1 CP 6046 31.03.2021 SB2021033121
#VU51109 - Resource exhaustion
CVE-2021-25252
CWE-400 Medium
No
No
XG SP1 CP6040 02.03.2021 SB2021030220
#VU50118 - Server-Side Request Forgery (SSRF)
CVE-2021-25236
CWE-918 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012820
SB2021012821
#VU50117 - Out-of-bounds write
CVE-2021-25249
CWE-787 Low
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50116 - Out-of-bounds read
CVE-2021-25248
CWE-125 Low
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50115 - Improper Access Control
CVE-2021-25246
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50113 - Improper Access Control
CVE-2021-25243
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50112 - Improper Access Control
CVE-2021-25242
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50111 - Improper Access Control
CVE-2021-25240
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50108 - Improper Access Control
CVE-2021-25235
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50107 - Improper Access Control
CVE-2021-25234
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50106 - Improper Access Control
CVE-2021-25233
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50105 - Improper Access Control
CVE-2021-25232
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50104 - Improper Access Control
CVE-2021-25231
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50103 - Improper Access Control
CVE-2021-25230
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50102 - Improper Access Control
CVE-2021-25229
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50101 - Improper Access Control
CVE-2021-25228
CWE-284 Medium
No
No
XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821


Showing elements 1 - 20 out of 49