GCVE - cpe:2.3:a:trendmicro:officescan:xg:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:officescan:xg:-:*:*:*:*:*:*

part: a version: xg update: -

Vendor	Trendmicro (`c5410dda-4dad-5329-a26d-d91c43e01834`)
Product	Officescan (`1b62076e-67fd-575d-acde-d1b597d7631f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-8599`	vulnerable	2026-06-08 05:27:16.995332	Details available Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability. Published: 2020-03-18T00:30:44.000Z Updated: 2025-10-21T23:35:47.710Z Open on db.gcve.eu Reference links https://success.trendmicro.com/solution/000245571 https://success.trendmicro.com/jp/solution/000244253	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8468`	vulnerable	2026-06-08 05:27:16.562654	Details available Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication. Published: 2020-03-18T00:30:43.000Z Updated: 2025-10-21T23:35:47.868Z Open on db.gcve.eu Reference links https://success.trendmicro.com/solution/000245571 https://success.trendmicro.com/jp/solution/000244253 https://success.trendmicro.com/solution/000245572 https://success.trendmicro.com/jp/solution/000244836	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8467`	vulnerable	2026-06-08 05:27:16.557007	Details available A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication. Published: 2020-03-18T00:30:43.000Z Updated: 2025-10-21T23:35:48.024Z Open on db.gcve.eu Reference links https://success.trendmicro.com/solution/000245571 https://success.trendmicro.com/jp/solution/000244253	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.