Known vulnerabilities in OfficeScan XG SP1

Vendor: Trend Micro
Software: OfficeScan
Version: XG SP1
Software CPE: cpe:2.3:a:trend_micro:officescan:*:*:*:*:*:*:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OfficeScan version XG SP1 OfficeScan XG SP1 is affected by 23 vulnerabilities: 2 critical, 3 high, 16 medium, 2 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51109 - Resource exhaustion
CVE-2021-25252		 CWE-400 Medium
No
No
 XG SP1 CP6040 02.03.2021 SB2021030220
#VU50119 - Improper Access Control
CVE-2021-25238		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012820
SB2021012821
#VU50118 - Server-Side Request Forgery (SSRF)
CVE-2021-25236		 CWE-918 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012820
SB2021012821
#VU50117 - Out-of-bounds write
CVE-2021-25249		 CWE-787 Low
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50116 - Out-of-bounds read
CVE-2021-25248		 CWE-125 Low
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50115 - Improper Access Control
CVE-2021-25246		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50113 - Improper Access Control
CVE-2021-25243		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50112 - Improper Access Control
CVE-2021-25242		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50111 - Improper Access Control
CVE-2021-25240		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50110 - Improper Access Control
CVE-2021-25239		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50108 - Improper Access Control
CVE-2021-25235		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50107 - Improper Access Control
CVE-2021-25234		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50106 - Improper Access Control
CVE-2021-25233		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50105 - Improper Access Control
CVE-2021-25232		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50104 - Improper Access Control
CVE-2021-25231		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU50103 - Improper Access Control
CVE-2021-25230		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50102 - Improper Access Control
CVE-2021-25229		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
#VU50101 - Improper Access Control
CVE-2021-25228		 CWE-284 Medium
No
No
 XG SP1 CP6040 28.01.2021 SB2021012819
SB2021012820
SB2021012821
#VU26157 - Improper input validation
CVE-2020-8468		 CWE-20 Critical
No
Exploited
 XG CP 1988, XG SP1 CP 5474 18.03.2020 SB2020031809
#VU26156 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8467		 CWE-94 Critical
No
Exploited
 XG CP 1988, XG SP1 CP 5474 18.03.2020 SB2020031809


Showing elements 1 - 20 out of 23