Known vulnerabilities in OfficeScan XG

Vendor: Trend Micro
Software: OfficeScan
Version: XG
Software CPE: cpe:2.3:a:trend_micro:officescan:*:*:*:*:*:*:*:*
Website: https://www.trendmicro.com/
Total vulnerabilities: 24
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OfficeScan version XG OfficeScan XG is affected by 24 vulnerabilities: 2 critical, 9 high, 4 medium, 9 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51109 - Resource exhaustion
CVE-2021-25252		 CWE-400 Medium
No
No
 XG SP1 CP6040 02.03.2021 SB2021030220
#VU26161 - Improper input validation
CVE-2020-8599		 CWE-20 High
No
Exploited
 XG CP 1988, XG SP1 CP 5474 18.03.2020 SB2020031809
#VU26159 - Uncontrolled Search Path Element
CVE-2020-8598		 CWE-427 High
No
No
 XG CP 1988, XG SP1 CP 5474 18.03.2020 SB2020031809
#VU26158 - Uncontrolled Search Path Element
CVE-2020-8470		 CWE-427 High
No
No
 XG CP 1988, XG SP1 CP 5474 18.03.2020 SB2020031809
#VU26157 - Improper input validation
CVE-2020-8468		 CWE-20 Critical
No
Exploited
 XG CP 1988, XG SP1 CP 5474 18.03.2020 SB2020031809
#VU26156 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8467		 CWE-94 Critical
No
Exploited
 XG CP 1988, XG SP1 CP 5474 18.03.2020 SB2020031809
#VU47348 - Exposure of sensitive information to an unauthorized actor
CVE-2019-19691		 CWE-200 Low
No
No
 XG (non-SP1) CP B1962, XG SP1 CP B5427r1 20.12.2019 SB2019122035
#VU35143 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-18189		 CWE-22 High
No
No
 - 28.10.2019 SB2019102814
#VU37054 - Improper input validation
CVE-2018-10507		 CWE-20 Low
Public exploit available
No
 - 12.06.2018 SB2018060822
#VU37055 - Improper input validation
CVE-2018-10508		 CWE-20 High
No
No
 - 12.06.2018 SB2018060822
#VU37056 - Improper input validation
CVE-2018-10509		 CWE-20 High
No
No
 - 12.06.2018 SB2018060822
#VU37063 - Memory corruption
CVE-2018-10358		 CWE-119 Low
No
No
 - 08.06.2018 SB2018060822
#VU37064 - Memory corruption
CVE-2018-10359		 CWE-119 Low
No
No
 - 08.06.2018 SB2018060822
#VU37065 - Memory corruption
CVE-2018-10505		 CWE-119 Low
No
No
 - 08.06.2018 SB2018060822
#VU37066 - Out-of-bounds read
CVE-2018-10506		 CWE-125 Medium
No
No
 - 08.06.2018 SB2018060822
#VU9344 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-11394		 CWE-78 High
Public exploit available
No
 - 16.11.2017 SB2017111606
#VU9345 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 - 15.11.2017 SB2017111607
#VU8808 - Permissions, Privileges, and Access Controls
CVE-2017-14088		 CWE-264 Low
No
No
 - 11.10.2017 SB2017101110
#VU8804 - Improper input validation
CVE-2017-14084		 CWE-20 High
Public exploit available
No
 - 11.10.2017 SB2017101110
#VU8803 - Improper input validation
CVE-2017-14083		 CWE-20 Low
Public exploit available
No
 - 11.10.2017 SB2017101110


Showing elements 1 - 20 out of 24