GCVE - cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*

part: a version: 11.0 update: *

Vendor	Trendmicro (`c5410dda-4dad-5329-a26d-d91c43e01834`)
Product	Officescan (`1b62076e-67fd-575d-acde-d1b597d7631f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-6218`	vulnerable	2026-06-08 05:11:53.487739	Details available A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system. Published: 2018-02-16T22:00:00.000Z Updated: 2024-08-05T05:54:53.355Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/103096 https://jvn.jp/jp/JVN28865183/ https://success.trendmicro.com/solution/1119326 https://success.trendmicro.com/jp/solution/1119348	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3608`	vulnerable	2026-06-08 05:11:39.114483	Details available A vulnerability in Trend Micro Maximum Security's (Consumer) 2018 (versions 12.0.1191 and below) User-Mode Hooking (UMH) driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes. Published: 2018-07-06T19:00:00.000Z Updated: 2024-08-05T04:50:30.305Z Open on db.gcve.eu Reference links https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120237.aspx http://esupport.trendmicro.com/support/vb/solution/ja-jp/1120144.aspx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8801`	vulnerable	2026-06-08 05:10:08.913166	Details available Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website. Published: 2017-05-05T19:00:00.000Z Updated: 2024-09-16T23:50:58.046Z Open on db.gcve.eu Reference links https://success.trendmicro.com/solution/1117204-security-bulletin-trend-micro-officescan-11-xg-multiple-vulnerabilities http://files.trendmicro.com/products/officescan/11.0_SP1/readme/osce-11-sp1-patch1-win-all-criticalpatch-6325_readme.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5481`	vulnerable	2026-06-08 05:09:46.971601	Details available Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation. Published: 2017-05-03T20:00:00.000Z Updated: 2024-08-05T15:04:15.289Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/98007 https://success.trendmicro.com/solution/1117204	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14087`	vulnerable	2026-06-08 05:08:49.191360	Details available A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages. Published: 2017-10-05T13:00:00.000Z Updated: 2024-08-05T19:13:41.655Z Open on db.gcve.eu Reference links https://success.trendmicro.com/solution/1118372 http://www.securityfocus.com/archive/1/541267/100/0/threaded http://packetstormsecurity.com/files/144404/TrendMicro-OfficeScan-11.0-XG-12.0-Host-Header-Injection.html http://hyp3rlinx.altervista.org/advisories/CVE-2017-14087-TRENDMICRO-OFFICESCAN-XG-HOST-HEADER-INJECTION.txt http://www.securityfocus.com/bid/101074	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1223`	vulnerable	2026-06-08 05:07:26.771834	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.